what is "realm" "KRB5_NT_PRINCIPAL" in cmd/ ktpass.exe

i try in windows xp :

c:\documents , settings\user\my documents\support>ktpass -princ 127.0.0.1@127.
0.0.1 -crypto des-cbc-md5 -ptype krb5_nt_principal -pass * -out 1.txt
type password 127.0.0.1:
type password again confirm:
key created.
output keytab 1.txt:

keytab version: 0x502
keysize 45 127.0.0.1@127.0.0.1 ptype 1 (krb5_nt_principal) vno 1 etype 0x3 (des-
cbc-md5) keylength 8 (0xb05462a437e3834c)

--------------------------------

open 1.txt:below:

   -
 127.0.0.1  127.0.0.1  
   
 癟b?銉l


----------------------------------
crypted by des-cbc-md5

whether in single pc (windows xp ),master ticket , server  ticket in
c:\documents , settings\user\application data\microsoft?
 

---

tickets

   ticket record helps client authenticate service.
   ticket contains following information:

ticket ::=                    [application 1] sequence {
                              tkt-vno[0]                   integer,
                              realm[1]                     realm,
                              sname[2]                     principalname,
                              enc-part[3]                  encrypteddata
}
-- encrypted part of ticket
encticketpart ::=     [application 3] sequence {
                      flags[0]             ticketflags,
                      key[1]               encryptionkey,
                      crealm[2]            realm,
                      cname[3]             principalname,
                      transited[4]         transitedencoding,
                      authtime[5]          kerberostime,
                      starttime[6]         kerberostime optional,
                      endtime[7]           kerberostime,
                      renew-till[8]        kerberostime optional,
                      caddr[9]             hostaddresses optional,
                      authorization-data[10]   authorizationdata optional
}
-- encoded transited field
transitedencoding ::=         sequence {
                              tr-type[0]  integer, -- must registered
                              contents[1]          octet string
}

---

Windows Server  >  Windows Server General Forum