Kerberos Message exchange

In msg.2 the AS sends Realm_c, ID_c Ticket_tgs, K_c-tgs, times, N1, Real_tgs, ID_tgs encrypted with E_k_c. I can't understand why Real_tgs is included if AS and TGS are on the same machine.

  • You're going to have to clarify your question here. Are you asking why the Realm field is required? – Steve Mar 27 '19 at 21:10
  • If I'm following your question correctly, it's because they may not actually be on the same machine, or belong to the same realm. – Steve Mar 27 '19 at 22:03
  • OK, but it is possible that for the same Kerberos Authentication Service the AS and TGS are in different Realms? What i read is that each Realm has a Kerberos server and thus different AS and TGS servers. – MD4tw Mar 27 '19 at 22:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.