Configuration Guide for Kerberos Client Products on HP-UX 11.0 | HP-UX 11i v1 | HP-UX 11i v1.6 | HP-UX 11i v2

Overview
Kerberos Overview
Chapter 122
The secure application validates the service ticket using the server’s
service key present in the key tab file. Using this service key, the server
decrypts the authenticator and verifies the identity of the user. It also
verifies that the user’s service ticket granted to the user, has not expired.
If the user does not have a valid service ticket, then the server will
return an appropriate error code to the client.
Step 7. This is an optional step. At the client’s request, the application server
can also return to the client, the time stamp that the client had sent
encrypted in the session key. This ensures a mutual authentication
between the client and the application server.