When user is already logged onto a domain and wants to access a resource located on a server within the same domain, a network logon process will take place.
In this case, the logon sequence is as follows:
1. User sends a server ticket request to the DC using her TGT (together with an authenticator) (KRB_TGS_REQ).
2. The TGS of the DC checks the authenticator, generates a server ticket, and sends it back to User (KRB_TGS_REP).
3. User sends the ticket (together with an authenticator) to the application server (KRB_AP_REQ).
4. The application verifies the ticket with the authenticator and sends back his or her authenticator to User for server authentication (KRB_AP_REP).
Sunday, 9 September 2007
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment