Windows integrated Kerberos authentication

I understand Kerberos as "a computer network authentication protocol which works on the basis of tickets to allow nodes communicating over a non-secure network to prove their identity to one another in a secure manner". But this means that a shared secret exist between entities ? In the windows environment, is this shared secret the user password ? Hash of the password ? How does it work ?

I can't understand the pre-authentication phase.