Original: The client authenticates to the AS once using a long-term shared secret (e.g. a password) and receives a TGT from the AS.
Simplified: Briefly, the client authenticates to AS using a long-term shared secret and receives a ticket from the AS.