Working on how Kerberos can be supported with Remoting for REM3-29, the first stage is understanding the unederlying mechanism.
Whilst there is some JDK documentation this does not go into the finer details, the implementation makes quite a few assumptions so this article is to capture the additional detail.