Kerberos Subprotocols

The Kerberos protocol is composed of three subprotocols.

Subprotocol Meaning
Authentication Service Exchange
In this subprotocol, the Key Distribution Center (KDC) gives the client a logon session key and a ticket-granting ticket (TGT).
Ticket-Granting Service Exchange
In this subprotocol, the KDC distributes a service session key and a ticket for the service.
Client/Server Exchange
In this subprotocol, the client presents the ticket for admission to a service.