Briefly , the client authenticates to AS using a long-term shared secret and receives a ticket from the AS . The client authenticates to the AS once using a long-term shared secret ( e.g. a password ) and receives a TGT from the AS .