Kerberos only uses secret-key Cryptography instead of public-key cryptography. It is a lot easier to design those.

Discovering KDCs

I needed a way to find KDCs for a domain. Here’s how I did it for TCP and UDP.

dig SRV _kerberos._udp.DOMAINNAME

And similarly for TCP.

dig SRV _kerberos._tcp.DOMAINNAME