There are 3 things that I don't fully understand about kerberos.
Let's say that we are adding new server to an AD Domain. KDC creates a shared secret for this server and how is this key send securly to the server?
There is a user who is a member of AD domain. User have his secret key (password) and he is changing it - how is it securly pass to KDC to update it's database?
Since each DC can (or maybe must) have KDC, is the KDC database replicated between each DC? If yes, how is this secured?