Cracking Open Kerberos: Understanding How Active Directory Knows Who You Are
When used for simple authentication, Active Directory's authenticator-of-choice Kerberos is trouble-free: set up an AD, Kerberos just works and that's it. But start to add AD-aware servers and services, or try to understand how a read-only domain controller differs from a full DC, and all of a sudden...