Question: how kerberos authentication works windows?
Answer: Client requests an authentication ticket (TGT) from the Key Distribution Center (KDC)
The KDC verifies the credentials and sends back an encrypted TGT and session key.
The TGT is encrypted using the Ticket Granting Service (TGS) secret key.