Ticket Granting Ticket (TGT) is a key element of the Kerberos authentication protocol. It serves as a temporary token issued by the Authentication Server (AS) after a user’s identity has been successfully verified. The TGT is essential for obtaining service tickets from the Ticket Granting Server (TGS) to access specific network resources.
Key Characteristics:
- Authentication Token: Proves the user’s identity to the TGS without requiring repeated login credentials.
- Encrypted and Secure: Contains information such as the user’s ID and session details, encrypted to prevent tampering.
- Expiration: Has a limited lifespan, ensuring users need to reauthenticate periodically for security purposes.
Use Case:
When a user logs into a Kerberos-protected system, they receive a TGT from the AS. This TGT is then presented to the TGS whenever access to a network service is required, streamlining authentication without repeatedly entering credentials.
In summary, the Ticket Granting Ticket is a cornerstone of Kerberos, enabling secure, efficient, and centralised authentication across network resources.
