On each new place I work there has to be an active directory.
Thank god I do not have to manage it, but I got tired of not understanding AD jargon.
(man I cannot believe I spent so much time learning this cr*p)
Kerberos
It needs a ton of shared secrets for symmetric encryption.
IMPORTANT : tickets are opaque tokens to the client
Otherwise the client could impersonate the KDC (key distribution server) or the services.
