The lynchpin to this approach is that both user and service implicitly trust the Kerberos authentication server (AS);

• 这个方法的关键是用户和服务暗中都相信Kerberos身份验证服务器（AS）；