title: Differences in Active Directory with and without Kerberos?
body: <p>I have a web application (ASP.NET/C#) that our clients' employees use, and one of the authentication methods we support is an external Active Directory via LDAP.</p>
  
  <p>I recently had a request to support Kerberos with AD.</p>
  
  <p>What does this entail from a development perspective?  I know the basics of Kerberos in the Unix world, but not sure how it fits in with AD/LDAP</p>
  
  <p>Currently, I use standard LDAP to bind with a service account to find the user, then bind as that user with their provided credentials to verify the login.</p>
  
  <p>What is needed differently to support Kerberos?  My Google-fu is failing me.</p>
  
  <p>To make it clear, the application server is not in the same domain as the AD server.</p>
  
  <p><strong>EDIT:</strong></p>
  
  <p>Is it even possible to do Kerberos authentication over an internet connection?</p>