TGT vs. Authentication Ticket

I'm reading Darril Gibson's book for the SYO-501 and was wondering what the difference between these two things were or if they were essentially the same thing with different names based on when or where they are used or if they are provided by Kerberos or not. Can someone explain this for me?

BTW, this will be my second taking of the exam to keep it active and I realize I probably don't need to know things in this much depth but I'd like to know nonetheless. Thanks in advance.

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

gespenstern

Probably the same. While TGT is a thing, I haven't heard about "authentication ticket" ever used as a term. Probably a dumbed down Kerberos explanation. Also could be a generalized umbrella term for all types of tickets, who knows.

RoyalTech

Looking it up a bit further, I think that an authentication ticket is just a single ticket while a TGT generates tickets for the different things that you may use that require tickets. I'm not positive that's accurate but that's the basic idea based on what I have read.

gespenstern

RoyalTech wrote: »

TGT generates tickets for the different things that you may use that require tickets

Which is, in essence, the process of authentication (proving one's identity). Therefore, TGT, being a ticket, while is used for authentication, IS an authentication ticket.

But I'm being picky here.

mgeoffriau

They are the same. Windows logs will show ""Kerberos authentication Ticket (TGT)", for example.