I would like to know what makes up a TGT ticket? The reason is that we've noticed the more Windows AD groups the account is in, the larger the size of the ticket. We've also noticed that when we clear Internet Explorer cookies, the ticket size drops (ever so slightly).
Brief example: If the account is in 543 AD groups, then the ticket size is 12,960. We have found the approximate ratio is 21.7.
So, 543 x 21.7 ~ 13K as ticket size.
Due to these behaviors, I started wondering what is really inside the ticket? My goal: To help identify the biggest offender that's causing the TGT ticket to be larger than the max limit ticket size set in our Apache server.
Any help would be appreciated.
Thanks