Authentication using the Kerberos Authentication Server (KAS). Authorization using the Ticket Granting Server (TGS).