if it is a valid request from client, it extracts the session key from the stkt using server secret key.
如果它是来自客户端的有效请求,它使用服务器秘密密钥从stkt提取会话密钥。
the whole message is encrypted using the ptgt session key and is sent back to the client.
整条消息使用ptgt会话密钥加密并发送回客户端。
the client retains the session key and forward the ticket to the server as it is.
客户端保留会话密钥,将票证按原样转发给服务器。
in dce, the service ticket is a data structure that authentication service uses to pass the client identity and session key to the server.
在dce 中,服务票证是一种数据结构,身份验证服务使用该结构将客户端身份和会话密钥传递给服务器。
client now makes an rpc call to the target server sending it the pstkt containing session key and the pac.
客户端现在向目标服务器发出一个rpc调用,向它发送包含会话密钥和pac的 pstkt。
this response message is encrypted under the session key passed by the client to the privilege service.
此请求消息使用客户端传递给特权服务的会话密钥进行加密。
however, it still leaves the requirement that the session key be somehow communicated.
但是,仍然需要传输会话键。
the encrypted portion of the stkt contains the name of the client, a session key generated by authentication service that client and server can use, and a lifetime of stkt.
stkt 的加密部分包含客户端的名称、身份验证服务生成的一个可供客户端和服务器使用的会话密钥,以及stkt的有效期。
tgt carries session key for use between the client and authentication service.
tgt包含供在客户端与身份验证服务之间使用的会话密钥。
the privilege service decrypts the request and gets a copy of the session key and confirms the identity of the client.
特权服务解密请求,获得会话密钥,并确认客户端的身份。
at this point, client has the session key that client can use for authenticating itself to the authentication service.
现在,客户端拥有了会话密钥,它可以使用该密钥向身份验证服务验证自身。
this session key will be used by the target server to confirm the identity of the client.
目标服务器将使用此会话密钥来确认客户端的身份。
client communicate to server with session key
客户端使用会话密钥与服务器通信
client makes an stkt request via authenticated rpc to authentication service to get a new session key for the client to communicate with any server.
客户端通过身份验证rpc向身份验证服务发出一个stkt请求,以获取供客户端与任何服务器通信所用的新会话密钥。
the authentication service make a response message to the client containing the tgt, a copy of tgt session key and other information.
身份验证服务向客户端发出一条响应消息,其中包含tgt、tgt会话密钥的一个副本和其他信息。
kdc creates a ticket by generating a random session key (k.session) which contains the identity of the client and some other useful information.
kdc通过生成一个随机会话密钥(k.session)创建一个票证,这个票证包含客户端的身份和其他一些有用信息。
here, client has been authenticated and server knows the shared session key to communicate to this particular client.
在这里,客户端已经过了身份验证,服务器知道用于与这个特定客户端通信的共享会话密钥。
all you really need to know is that data is reliably stored and can be accessed given only a single key, usually called the session key or session id.
您实际上只需知道数据被可靠地存储,只需提供一个键(常常称为会话键或会话id),就可以访问会话数据。