Kerberos 5 KDC Overview
The Kerberos 5 Key Distribution Center (KDC) has two parts:
- An Authentication Server (AS) that handles the authentication of clients
- A Ticket-Granting Server (TGS) which hands out tickets
They normally run as part of the same program (krb5kdc), but are logically two separate entities.