Home/ Questions/Q 6799565
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-26T18:51:49+00:00

I have a question about forward in Kerberos: Does forward mean that the end

  • 0

I have a question about forward in Kerberos:
Does forward mean that the end user will give the TGT to a service so that the service can use the TGT to request others tickets when necessary? If it is the case, does that mean when user first authenticates himself/herself to AS, user will set certain flags, and AS will return user a TGT with FORWARDED set? And then user will give this TGT to service? Is this right? Or asked in other way, if user gives TGT to a service, this FORWARDED TGT is issued by AS or TGS? Thank you.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Your first assumption is right. The forwarded TGT should be included in the service ticket which is generated with the help of the AS. Otherwise the client has no chance to verify if the service is really registered. Have a look at this. It might help you.

    • 0