The Stack Overflow podcast is back! Listen to an interview with our new CEO.

New answers tagged


It seems you may have some misunderstanding of Kerberos and/or Windows domains. First of all, the browser doesn't generate a Kerberos ticket; a domain controller does. At most, the browser will ask the local security authority (LSASS) to do it. To get Kerberos working, you need to understand how authentication and trusts work in an AD environment. The user ...


Does browser has access to read the TGT from local machine? Yes, that's the whole idea of Kerberos: You acquire a ticket, and then local applications can use it for auth.

Top 50 recent answers are included