Conceptual difference between kerberos service ticket and token?

Rohan Suri rohan.a.suri at gmail.com
Sun Oct 1 08:37:46 EDT 2017


Hi krbdev,

Upon having a TGT, we request a *service ticket* from KDC - providing the
ServicePrincipalName of the target service.
Now at places (esp in context of GSSAPI), it only uses the term token -
when establishing context.
Is this token equivalent to service ticket in all aspects? Is there a
difference?

The question might be of less value, but I'm a purist and hence need this
understanding

Thank you


More information about the krbdev mailing list