Can anyone recommend any good articles that explain the conversation between AD domain controllers and mac workstations in terms of kerberos authentication?Thanks, Chris

Hi, The Kerberos authentication protocol provides a mechanism for mutual authentication between a client and a server before a network connection is opened between them. The protocol assumes that initial transactions between clients and servers take place on an open network an environment where most clients and many servers are not physically secure and packets traveling along the network can be monitored and modified at will. In other words, the protocol is designed for an environment that is much like today's Internet, where an attacker can easily pose as either a client or a server and can readily eavesdrop on or tamper with communications between legitimate clients and servers. Kerberos Components For more information please refer to these MS articles: How the Kerberos Version 5 Authentication Protocol Works http://technet.microsoft.com/en-us/library/cc772815(v=WS.10).aspx How Kerberos Authentication Works http://technet.microsoft.com/en-us/library/cc961963.aspx Kerberos Authentication How it works! http://technet.microsoft.com/en-us/video/Video/hh779638Lawrence TechNet Community Support

Thank you very muchThanks, Chris