Ticket Granting Ticket
aliases:
- TGT
An access key granted to approved hosts to access network services or resources without repeatedly entering credentials. A key component of the Kerberos network authentication protocol.
Upon approval, the Authentication Service sends back the following information to the host that requested access to a specific service:
- the Security Identifier (SID)
- the Ticket Granting Service (TGS) ID
- current timestamp
- User's IP address
- the lifetime of the TGT
- the TGT itself
- the session key Another message is then sent to the user with the following information:
- the TGS ID
- the timestamp
- and the session key
#XI