I am new to kerberos, and just learing the concept,could you tell me, which layer does kerberos work at ? and do you have to use kerberos compatible client application with it ?