Node: Kerberos Tickets, Next: The Kerberos Database, Previous: Network Services and Their Client Programs, Up: How Kerberos Works

### Kerberos Tickets

Under Kerberos, the `klogind` daemon allows you to login to a remote machine if you can provide `klogind` a Kerberos ticket which proves your identity. In addition to the ticket, you must also have possession of the corresponding ticket session key. The combination of a ticket and the ticket's session key is known as a credential.

Typically, a client program automatically obtains credentials identifying the person using the client program. The credentials are obtained from a Kerberos server that resides somewhere on the network. A Kerberos server maintains a database of user, server, and password information.