The authentication service creates a TGT.

身份验证服务创建一个TGT。

The credentials for a user principal are always a TGT.

用户主体的凭证通常是 TGT。

TGT session key is the most important part of a TGT.

TGT会话密钥是TGT最重要的部分。

Obtain client authentication credential (TGT) using kinit

使用 kinit 获得客户机身份验证凭证（TGT）

This message includes the targeted server name and the TGT.

此消息包含目标服务器名称和TGT。

Basically, TGT contains two parts illustrated below in Figure 4.

基本上，TGT包含两部分，如图4所示。

It retrieves the default TGT if the specified principal is null.

如果特定主体是空(null)，它就获得缺省的TGT。

The classes represent a Kerberos TGT and a secret key, respectively.

这两个类分别代表了一个 Kerberos TGT 和一个密钥。

The client has the valid TGT but cannot obtain the service ticket(TGS)

客户机拥有有效的 TGT 但不能获取服务票据（TGS）

So the client decrypts the message using this copy of TGT session key.

所以客户端使用这个TGT会话密钥副本解密消息。

The entire TGT is encrypted with the secret key of authentication service.

整个 TGT 使用身份验证服务的秘密密钥加密。

For a service principal, it is usually a secret key but can also be a TGT.

对服务主体而言，它通常是密钥，但也可以是 TGT。

Note that the TGT and secret key are saved in the private credentials set.

注意 TGT 和密钥保存在私有的凭证集中。

Get the TGT containing session key for use with the authentication services.

获得包含供与身份验证服务器一同使用的会话密钥的tgt。

TGT carries session key for use between the client and authentication service.

TGT 包含供在客户端与身份验证服务之间使用的会话密钥。

The user does not need to do anything after entering the password for the initial TGT.

用户在为初始的TGT输入密码之后就不需要做任何事情了。

Normally, a TGT is acquired for GSSAPI user principals and not service principals.

通常，TGT是为GSSAPI用户主体而不是为服务主体而获取的。

The client already has the TGT session key obtained from the previous TGT request.

客户端已经拥有从前面的TGT请求获得TGT会话密钥。

The objects to be added to Subject (principal, TGT, and skey) are from the login phase.

要加到Subject的对象(principal、tgt和skey)来自登录阶段。

A GSSAPI service principal may also initiate context, in which case it requires a TGT.

一个GSSAPI服务主体还可以初始化上下文，这时需要TGT。

That's why I'm going to omit the padata field from the TGT request that I'm going to generate.

因此我将在要生成的TGT请求中略去padata字段。

As discussed previously, other factors could be used as the basis for choosing the default TGT.

如前面所讨论的，其它因素可以用做选择缺省的TGT的依据。

Unlike Walmart, Target's (TGT) main appeal is a combination of low prices and designer brands.

与沃尔玛不同，塔吉特的主要吸引力在于低价格与设计师品牌相结合。

The TGT is required for the user principal to initiate GSSAPI context with one or more service principals.

TGT被要求用一个或多个服务主体来为用户主体初始化gssapi上下文。

Support default credentials; install the owner of the default TGT or secret key as the principal in the Subject.

支持缺省凭证；将缺省TGT或密钥的所有者作为主体安装在Subject里。

The login module can also use an existing TGT from a credentials cache or an existing secret key from a key table.

登录模块还可以使用一个来自凭证高速缓存的已存在的TGT或是来自密钥表的已存在的密钥。

The TGT contains the identity of the client, a randomly generated TGT session key and the lifetime of the TGT.

该TGT包含客户端的身份、一个随机生成的TGT会话密钥和TGT的有效期。

Recall from that discussion that a TGT request contains four data fields: pvno, msg-type, padata, and req-body.

回想在那里的讨论中，TGT请求包含四个数据字段：pvno、msg - type、padata和req - body。

This option can also be used to indicate that a default TGT cache should be used by specifying, for example, the value.

该选项还可以用于表明需要指定一个要使用的缺省TGT高速缓存，例如，的值。

This information is needed to acquire a TGT for a user principal or to create a secret key for a service principal.

在为用户主体获取tgt时或是为服务主体创建一个密钥时需要此信息。