Glossary

foreign cell surrogate

Principals (whose names are in the form krbtgt/cell name) that are maintained in the registry database for the purpose of intercell authentication. To accomplish intercell authentication, the foreign cell surrogates in each cell's registry share a secret key. This secret key is known to both the local and foreign cell's Authentication Service. It is through their surrogates that two instances of the Authentication Service are able to convey information about their respective principals to one another, thus enabling a principal from one cell to acquire a ticket to a principal in another cell. See also trust peer.