title: Differences between CAS and Kerberos
body: <p>I know Central Authentication Service (CAS) and Kerberos both could be utilized to authenticated for establishing the session.The two protocols involves at least three parties,and will create a Ticket Granting Ticket duration authentication,so which differences are there between CAS and Kerberos?</p>
  
  <p>Anyone could help? Thank you!</p>
  
  <p><strong>[UPDATE]</strong></p>
  
  <p>@Fred said (please see reply below)</p>
  
  <blockquote>
    <p>it(CAS) is a way to proxy authentication services like Kerberos or
    LDAP on the Web.</p>
  </blockquote>
  
  <p>However,JASIG states "CAS then generates a ticket and a transient cookie transmitted over SSL to be stored in Browser memory" (<a href="https://wiki.jasig.org/display/CAS/Extended+Authentication+Walkthroughs" rel="nofollow">https://wiki.jasig.org/display/CAS/Extended+Authentication+Walkthroughs</a>),  so I guess CAS isn't just like a proxy because it itself can generate a ticket. Am I right?</p>
  
  <p>Please shed a light on me, thanks!</p>