3.2. The Client/Server Authentication Exchange

                        Summary

   Message direction                         Message type    Section
   Client to Application server              KRB_AP_REQ      5.5.1
   [optional] Application server to client   KRB_AP_REP or   5.5.2
                                             KRB_ERROR       5.9.1

The client/server authentication (CS) exchange is used by network applications to authenticate the client to the server and vice versa. The client must have already acquired credentials for the server using the AS or TGS exchange.

• 3.2.1. The KRB_AP_REQ message
• 3.2.2. Generation of a KRB_AP_REQ message
• 3.2.3. Receipt of KRB_AP_REQ message
• 3.2.4. Generation of a KRB_AP_REP message
• 3.2.5. Receipt of KRB_AP_REP message
• 3.2.6. Using the encryption key