Kerberos

Takes password, constructs chunk of bits that cryptographically prove who you are: 'tickets'
network failure => kerberos failure => login failure
clock failure => kerberos failure => login failure
Tickets expire
- kinit renews them
- kauthd renews them automatically
Multiple instances
- josullvn.root
- josullvn.mail