TGT
/ˌtiː-dʒi-ˈtiː/
n. “A master pass that lets you ask for other passes.”
TGT, or Ticket Granting Ticket, is a foundational element of the Kerberos authentication protocol. It is a temporary, cryptographically protected credential issued to a user or service after successful initial authentication. Once obtained, a TGT allows the holder to request access to other services without re-entering credentials.
TGS
/ˌtiː-dʒi-ˈɛs/
n. “The ticket booth behind the ticket booth.”
TGS, or Ticket Granting Service, is a core component of the Kerberos authentication system. It operates as part of the KDC and is responsible for issuing service-specific tickets that allow users or systems to access network resources securely — without ever re-sending their password.
Kerberos
/ˈkɛr-bə-rɒs/
n. “Prove who you are without shouting your password.”
Kerberos is a network authentication protocol designed to securely verify the identity of users and services over insecure networks. Named after the three-headed dog from Greek mythology that guards the underworld, it ensures that the right entities are talking to each other without exposing sensitive credentials in transit.