KB 775235 - Kerberos Authentication – Overview

KB 775235 - Kerberos Authentication – Overview

What is Kerberos?


Kerberos is a secure authentication method used in our Active Directory (AD) environment (mbuzztech.com).

      It allows users to:
  1. Access multiple systems without re-entering passwords (Single Sign-On – SSO)
  2. Log in once

Where We Use It

      Kerberos is used for:
  1. Windows domain login
  2. Access to shared folders
  3. Internal applications
  4. Network resources (printers, servers, etc.)

How It Works


  1. User Login
    User logs in using domain credentials (mbuzztech.com)
  2. TGT Request (Ticket Granting Ticket)
    System contacts the Domain Controller
    A TGT (Ticket Granting Ticket) is issued after successful authentication
  3. TGS Request (Service Ticket)
    When accessing a service (file server, app, etc.), system uses the TGT
    Requests a TGS (Service Ticket) for that specific service
  4. Access Resource
    Service ticket is presented to the target system
    Access is granted without asking for password again

Key Components

  1. User Device – Employee laptop/desktop
  2. Active Directory (Domain Controller) – Authentication server for mbuzztech.com
  3. TGT (Ticket Granting Ticket) – Initial authentication ticket
  4. TGS (Service Ticket) – Ticket used to access specific services

Why We Use Kerberos

  1. Single Sign-On (SSO)
  2. Secure authentication (no repeated password transmission)
  3. Centralized control via Active Directory
  4. Seamless access to internal systems