1*7f2fe78bSCy Schubert<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN"> 2*7f2fe78bSCy Schubert<HTML> 3*7f2fe78bSCy Schubert<HEAD> 4*7f2fe78bSCy Schubert<meta name="GENERATOR" content="Microsoft® HTML Help Workshop 4.1"> 5*7f2fe78bSCy Schubert 6*7f2fe78bSCy Schubert<link rel="stylesheet" type="text/css" href="Leash.css" /> 7*7f2fe78bSCy Schubert<Title>Glossary</Title> 8*7f2fe78bSCy Schubert</HEAD> 9*7f2fe78bSCy Schubert<BODY> 10*7f2fe78bSCy Schubert<H1>Glossary</H1> 11*7f2fe78bSCy Schubert<dl> 12*7f2fe78bSCy Schubert<dt> default principal </dt> 13*7f2fe78bSCy Schubert<dd> Your default principal is the one whose tickets are used when an application or service asks for tickets without specifying which principal is being authenticated. If you have only one principal, that principal is always the default. <br><a href="HTML/Principals.htm#default-principal">About: Default Principals</a></dd> 14*7f2fe78bSCy Schubert<dt> domain </dt> 15*7f2fe78bSCy Schubert<dd> In Windows, realms are called domains. <br><a href="HTML/Kerberos_Terminology.htm#realm">About: Kerberos Terminology (Realms)</a></dd> 16*7f2fe78bSCy Schubert<dt> encryption key </dt> 17*7f2fe78bSCy Schubert<dd> A value that a specific code or algorithm uses to make information unreadable to anyone without a matching key. </dd> 18*7f2fe78bSCy Schubert<dt> encryption type </dt> 19*7f2fe78bSCy Schubert<dd> The type of encryption used to encode your tickets and session keys. You can show the encryption types used for your tickets and session keys by selecting that option in the View Options panel in the Options tab. <br><a href="HTML/Options_Tab.htm#using-view-options"> How to: Use View Options Panel</a> 20*7f2fe78bSCy Schubert </dd> 21*7f2fe78bSCy Schubert<dt>expiration alarm </dt> 22*7f2fe78bSCy Schubert<dd> Optional audible alarm that warns you 15, 10, and 5 minutes before your tickets expire. Turn the alarm on or off in the Ticket Options panel in the Options tab. <br><a href="HTML/Options_Tab.htm#using-ticket-options">How to: Use the Ticket Options Panel</a> 23*7f2fe78bSCy Schubert </dd> 24*7f2fe78bSCy Schubert<dt> <a name="flags"> flags</a> </dt> 25*7f2fe78bSCy Schubert<dd> Properties (renewable and/or forwardable) assigned to a ticket when you obtain it. Show or hide flags with the View Options panel in the Options tab. <br> 26*7f2fe78bSCy Schubert<a href="HTML/Options_Tab.htm#using-view-options"> How to: Use View Options Panel</a> 27*7f2fe78bSCy Schubert<br><a href="HTML/Ticket_Settings.htm">About: Ticket Settings and Flags </a> 28*7f2fe78bSCy Schubert </dd> 29*7f2fe78bSCy Schubert<dt> forwardable </dt> 30*7f2fe78bSCy Schubert<dd> Tickets flagged as forwardable when you obtain them can be forwarded to the remote host when you connect via telnet, ssh, ftp, rlogin, or similar applications, so you will not need to get new tickets to use remote services. <br><a href="HTML/Ticket_Settings.htm">About: Ticket Settings and Flags </a> 31*7f2fe78bSCy Schubert </dd> 32*7f2fe78bSCy Schubert 33*7f2fe78bSCy Schubert 34*7f2fe78bSCy Schubert <dt> issued</dt> 35*7f2fe78bSCy Schubert<dd>The date and time that your tickets were issued. Show or hide this information with the View Options panel in the Options tab. <br><a href="HTML/Options_Tab.htm#using-view-options"> How to: Use View Options Panel</a> 36*7f2fe78bSCy Schubert </dd> 37*7f2fe78bSCy Schubert 38*7f2fe78bSCy Schubert<dt> <a name="krbtgt"> krbtgt </a></dt> 39*7f2fe78bSCy Schubert<dd> The Kerberos Ticket Granting Ticket. If you click on a principal in the main window, you will see all of that principal's tickets. The first one will be for <span class="typed">krbtgt</span> because with Kerberos you first obtain a Ticket Granting Ticket that is then used to obtain Service Tickets for each service you use. <br><a href="HTML/Kerberos_Terminology.htm#ticket">About: Kerberos Terminology (Tickets)</a> </dd> 40*7f2fe78bSCy Schubert<dt> principal </dt> 41*7f2fe78bSCy Schubert<dd> A unique identity in Kerberos. For users, it is the identity you use to log on with Kerberos. Principals are a combination of your user name and the name of the realm you belong to. <br><a href="HTML/Principals.htm">About: Principals</a> 42*7f2fe78bSCy Schubert </dd> 43*7f2fe78bSCy Schubert 44*7f2fe78bSCy Schubert 45*7f2fe78bSCy Schubert<dt> realm </dt> 46*7f2fe78bSCy Schubert<dd> Kerberos realms are a way of logically grouping resources and identities that use Kerberos. Your realm is the home of your Kerberos identity and your point of entry to the network resources controlled by Kerberos. In Windows, realms are called <em>domains</em>. 47*7f2fe78bSCy Schubert<br><a href="HTML/Kerberos_Terminology.htm#realm">About: Kerberos Terminology (Realms)</a> 48*7f2fe78bSCy Schubert</dd> 49*7f2fe78bSCy Schubert<dt> <a name="renewable-until">renewable until </a></dt> 50*7f2fe78bSCy Schubert<dd> The date and time after which your renewable tickets cannot be renewed any more. Show or hide this information with the View Options panel in the Options tab. <br><a href="HTML/Options_Tab.htm#using-view-options"> How to: Use View Options Panel</a> 51*7f2fe78bSCy Schubert </dd> 52*7f2fe78bSCy Schubert<dt> RSA SecurID </dt> 53*7f2fe78bSCy Schubert<dd>A method of using two-factor authentication to control user access to network resources. The two authentication factors are something the user knows (a secret PIN) and something the user has (an automatically generated code displayed either on a special device or on a device the user already owns, such as a phone). If your company uses RSA SecurID, you will need to enter your SecurID password after you use your Kerberos password to submit a Get Ticket request. <br><a href="HTML/Get_Tickets.htm">How to: Get tickets</a> 54*7f2fe78bSCy Schubert </dd> 55*7f2fe78bSCy Schubert<dt> SecurID </dt> 56*7f2fe78bSCy Schubert<dd> See RSA SecurID </dd> 57*7f2fe78bSCy Schubert<dt>session key </dt> 58*7f2fe78bSCy Schubert<dd> 59*7f2fe78bSCy SchubertA key used to encrypt and decrypt communications between computers. View the encryption type of your session keys by selecting Encryption Type in the View Options panel in the Options tab. <br> 60*7f2fe78bSCy Schubert<a href="HTML/Options_Tab.htm#using-view-options"> How to: Use View Options Panel</a><br> 61*7f2fe78bSCy Schubert<a href="HTML/Encryption_Types.htm">About: Encryption Types</a> 62*7f2fe78bSCy Schubert </dd> 63*7f2fe78bSCy Schubert 64*7f2fe78bSCy Schubert<dt> ticket </dt> 65*7f2fe78bSCy Schubert<dd> Obtain your ticket by entering your user name and password. The ticket is an encrypted block of data that authenticates you to the group of network resources using Kerberos, allowing you to access those resources for the lifetime of the ticket. <br><a href="HTML/Tickets.htm">About:Tickets</a> 66*7f2fe78bSCy Schubert 67*7f2fe78bSCy Schubert </dd> 68*7f2fe78bSCy Schubert<dt> <a name="valid-until">valid until </a></dt> 69*7f2fe78bSCy Schubert<dd> The date and time your ticket will expire. Show or hide this information with the View Options panel in the Options tab. <br><a href="HTML/Options_Tab.htm#using-view-options"> How to: Use View Options Panel</a> 70*7f2fe78bSCy Schubert </dd> 71*7f2fe78bSCy Schubert</BODY> 72*7f2fe78bSCy Schubert</HTML> 73