Simple Kerberos w/TGS

• Client requests a ticket granting ticket on behalf of user

• Sends user’s ID and the ID of the TGS

• Indicates request for TGS service