Getting a Host Ticket
The user then runs another program, e.g. rlogin, eudora, rsh, and which wants a service ticket to access a host or a service (e.g. popper).
The client program sends the name of the target service, the encrypted TGT, E(TGT, KTGS), and an Authenticator encrypted with the session key E(Auth, Ks1) to the Ticket-Granting Service.
The authenticator is information used to validate the request and prevent reuse of the request.