Editing Kerberos (protocol) (section)

====Client Service Request====
# Upon receiving messages E and F from TGS, the client has enough information to authenticate itself to the Service Server (SS).  The client connects to the SS and sends the following two messages:
#* Message E: From the previous step (the ''Client-to-server ticket'', encrypted using service's Secret key by the TGS).
#* Message G: A new Authenticator, which includes the client ID, timestamp and is encrypted using ''Client/Server Session Key''.
# The SS decrypts the ticket (message E) using its own secret key to retrieve the ''Client/Server Session Key''. Using the sessions key, SS decrypts the Authenticator and compares client ID from messages E and G, if they match server sends the following message to the client to confirm its true identity and willingness to serve the client:
#* Message H: The timestamp found in client's Authenticator (plus 1 in version 4, but not necessary in version 5<ref>{{cite web |url=https://tools.ietf.org/html/rfc1510#section-3.2.4 |title=The Kerberos Network Authentication Service (V5) |last1=Neuman |first1=C. |last2=Kohl |first2=J. |year=1993 |doi=10.17487/RFC1510 |url-status=live |archive-url=https://web.archive.org/web/20160821221402/https://tools.ietf.org/html/rfc1510#section-3.2.4 |archive-date=2016-08-21 |doi-access=free }}</ref><ref>{{cite web |url=https://tools.ietf.org/html/rfc4120#section-3.2.4 |title=The Kerberos Network Authentication Service (V5) |last1=Neuman |first1=Clifford |last2=Hartman |first2=Sam |last3=Yu |first3=Tom |last4=Raeburn |first4=Kenneth |year=2005 |doi=10.17487/RFC4120 |url-status=live |archive-url=https://web.archive.org/web/20160821232023/https://tools.ietf.org/html/rfc4120#section-3.2.4 |archive-date=2016-08-21 }}</ref>), encrypted using the ''Client/Server Session Key''.
# The client decrypts the confirmation (message H) using the ''Client/Server Session Key'' and checks whether the timestamp is correct. If so, then the client can trust the server and can start issuing service requests to the server.
# The server provides the requested services to the client.