Ticket Granting Ticket
Small, encrypted identification file with a limited validity period
In some computer security systems, a Ticket Granting Ticket or Ticket to Get Tickets (TGT) is a small, encrypted identification file with a limited validity period. After authentication, this file is granted to a user for data traffic protection by the key distribution center (KDC) subsystem of authentication services such as Kerberos. The TGT file contains the session key, its expiration date, and the user's IP address, which protects the user from man-in-the-middle attacks. The TGT is used to obtain a service ticket from Ticket Granting Service (TGS). User is granted access to network services only after this service ticket is provided.[1]
- ^ "Kerberos Explained". Retrieved 7 July 2014.
[1]
- v
- t
- e
Authentication
APIs
- BSD Authentication (BSD Auth)
- eAuthentication (eAuth)
- Generic Security Services API (GSSAPI)
- Java Authentication and Authorization Service (JAAS)
- Pluggable Authentication Modules (PAM)
- Simple Authentication and Security Layer (SASL)
- Security Support Provider Interface (SSPI)
- XCert Universal Database API (XUDA)
protocols
- ACF2
- Authentication and Key Agreement (AKA)
- CAVE-based authentication
- Challenge-Handshake Authentication Protocol (CHAP)
- MS-CHAP
- Central Authentication Service (CAS)
- CRAM-MD5
- Diameter
- Extensible Authentication Protocol (EAP)
- Host Identity Protocol (HIP)
- IndieAuth
- Kerberos
- LAN Manager
- NT LAN Manager (NTLM)
- OAuth
- OpenID
- OpenID Connect (OIDC)
- Password-authenticated key agreement protocols
- Password Authentication Protocol (PAP)
- Protected Extensible Authentication Protocol (PEAP)
- Remote Access Dial In User Service (RADIUS)
- Resource Access Control Facility (RACF)
- Secure Remote Password protocol (SRP)
- TACACS
- Woo–Lam
Category
Commons
- ^ "Kerberos Explained". Retrieved 7 July 2014.