• a central component of the Kerberos authentication system. serves as a repository for all kerberos principals within a realm that stores info necessary for the auth process such as
    • security principals
    • passwords/secret keys (self explanatory)
    • administrative info
      • administrative details related to each principal like password polocies and account settings