Skip to main content

Ticket Granting Ticket

aliases:

  • TGT

An access key granted to approved hosts to access network services or resources without repeatedly entering credentials. A key component of the Kerberos network authentication protocol.

Upon approval, the Authentication Service sends back the following information to the host that requested access to a specific service:

  • the Security Identifier (SID)
  • the Ticket Granting Service (TGS) ID
  • current timestamp
  • User's IP address
  • the lifetime of the TGT
  • the TGT itself
  • the session key

Another message is then sent to the user with the following information:

  • the TGS ID
  • the timestamp
  • and the session key
Back to top