Kerberos Tickets Renewal

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance


Hi guys

I understand that for Kerberos authentication in a 2k3 domain, when a
user successfully authenticated himself to the AD, the KDC will issue
him a TGT and a session ticket. He will then use them to request for
sevice tickets to access server resources.

What I like to know is when the TGT expires, it will go through a
ticket renewal process with the KDC to renew the tickets. Will they
through another round of authentication during renewal?

Please advise.

Thanks


--
Domon
------------------------------------------------------------------------
Domon's Profile: http://forums.techarena.in/members/domon.htm
View this thread: http://forums.techarena.in/active-directory/1143846.htm

http://forums.techarena.in

.

Relevant Pages

  • Re: Differences between TGT and Service Tickets
    ... A service ticket is a ticket you need to access a specific service. ... For normal services, you get your ticket at the KDC and use it to access the service. ... Requesting that ticket is also accessing a service: the key distributing service at the KDC. ... The name TGT in fact says it all: it's the ticket that will grant you other tickets. ...
    (comp.protocols.kerberos)
  • Re: Kerberos OpenLDAP Frontend
    ... Jonathan Javier Cordoba Gonzalez wrote: ... but then you are mixing the authentication with the authorization. ... A KDC with passwords and LDAP ...
    (comp.protocols.kerberos)
  • RE: Membership Provider Woes
    ... You set the FormsAuth ticket on the Login_LoggingIn. ... cookie regardless of whether the user's authentication failed or not. ... Doens't the membership provider set a forms auth cookie for me ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Forms authentication cookie handling question (C#)
    ... programmatically generate forms authentication ticket and set it in ASP.NET ... You use the Login control's "Authentication" event to do the user ... LoginControl's default code logic to generate authentication cookie. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Forms authentication failed - ticket supplied has expired
    ... Forms authentication failed for the request. ... As for the ticket expired issue, is it frequently occuring or just occur ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet)