Authentication vs. Authorization

http://www.duke.edu/~rob/kerberos/authvauth.html

Authentication: challenge/response
Authorization: access control