Version 4 Authentication

• Problems:

  • Lifetime associated with the ticket granting ticket – too short, repeated password prompting; too long, vulnerable to capture
  • Server authentication to user – false server could act as a real server