Slides are meant to be paired with the blog post: http://www.roguelynn.com/words/explain-like-im-5-kerberos

1. KDC Clients Key Distribution Center
Authentication
You Server
HTTP Ticket Granting
Server
service
Kerberos Realm
Monday, April 1, 13

2. Authentication
You Server
plaintext request
your ID, Ticket Granting Server ID,
IP address, lifetime
Monday, April 1, 13

3. Authentication
You Server
user ID
lookup in KDC
Monday, April 1, 13

4. Authentication
You Server
Ticket Granting Server Session Key
HTTP service’s ID, timestamp, lifetime, TGS Session Key
Ticket Granting Ticket
your ID, HTTP service ID, IP address,
timestamp, lifetime, and the TGS Session Key
Monday, April 1, 13

5. Authentication
You Server
Ticket Granting Server Session Key
Your Secret Key
Ticket Granting Ticket
Ticket Granting Server Secret Key
Monday, April 1, 13

6. plaintext request
HTTP Service ID and lifetime
Ticket Granting
You Server
Authenticator
your ID and timestamp
Ticket Granting Ticket
your ID, HTTP service ID, IP address,
timestamp, lifetime, and the TGS Session Key
Monday, April 1, 13

7. Ticket Granting
You Server
user ID
lookup in KDC
Monday, April 1, 13

8. plaintext request
Ticket Granting
You Server
Authenticator
Ticket Granting Server Session Key
Ticket Granting Ticket
Ticket Granting Server Secret Key
Monday, April 1, 13

9. Ticket Granting
You Server
HTTP Service Session Key
your client ID and timestamp
Ticket for HTTP Service
your ID, HTTP service ID, IP address,
timestamp, lifetime, and the TGS Session Key
Monday, April 1, 13

10. Ticket Granting
You Server
HTTP Service Session Key
Ticket Granting Server Session Key
Ticket for HTTP Service
HTTP Service Secret Key
Monday, April 1, 13

11. Ticket for HTTP Service
your ID, HTTP service ID, IP address,
You timestamp, lifetime,
and the TGS Session Key
HTTP
service Authenticator
your client ID and timestamp
Monday, April 1, 13

12. Ticket for HTTP Service
HTTP Service Secret Key
You
HTTP
service Authenticator
HTTP Service Session Key
Monday, April 1, 13

13. You
Authenticator
HTTP HTTP service ID and timestamp
service
Monday, April 1, 13

14. You
Authenticator
HTTP HTTP Service Session Key
service
Monday, April 1, 13

15. You
HTTP
service
Monday, April 1, 13