Windows Logon Session Tickets

MIT Kerberos is not the only interface for managing Kerberos tickets. When you log on to a Windows domain, you are issued a Kerberos ticket for your Windows Logon session. This ticket is automatically renewed until you log out of the session, when it is destroyed.

Sometimes applications that require Kerberos authentication only work with MIT Kerberos. Others work only with the interface that is part of the Windows Logon session. For this reason, you can use MIT Kerberos to import tickets from your Windows domain or export tickets into your Windows Logon session for use with Windows services, depending on your needs.