Kerberos Server Version 3.12 Administrator's Guide

Overview
Authentication Process
Chapter 1 25
Authentication Process
The Kerberos server grants tickets to your user principal to access
secured network services. You must authenticate the server by providing
your user name and password. When the server authenticates you, it
returns a set of initial credentials for you, including a TGT and a session
key.
The Kerberos server grants a service ticket for a specific service principal
that can be associated with one or more Kerberos-secured services. A
client application uses your service ticket to authenticate you to a
Kerberos-secured network service. The secured client application
automatically handles the transactions with the Kerberos Server and the
secured application server. Service tickets and associated session keys
are generally cached in your user credentials cache along with the TGT
of the user.