[22589] in Kerberos
decrypt kerberos ticket
daemon@ATHENA.MIT.EDU (Amol Dixit)
Wed Sep 29 14:37:55 2004
Message-ID: <1865.141.151.130.150.1096482812.squirrel@rhblade2.clemson.edu>
Date: Wed, 29 Sep 2004 14:33:32 -0400 (EDT)
From: "Amol Dixit" <adixit@clemson.edu>
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
Hi,
I am trying to decrypt a Kerberos ticket embedded in an AP_REQ.
Since the password is known, we make the keytab entry using the password
and salt using krb5_string_to_key() & krb5_kt_add_entry().
However krb5_rd_req() fails in krb5_old_decrypt() at this point inspite of
reading the same keytable entry.
if (memcmp(cksum.data, cksumdata, cksum.length) != 0) {
ret = KRB5KRB_AP_ERR_BAD_INTEGRITY;
goto cleanup;
}
Is anyone aware whether any manipulation needs
to be done on the 8 byte keytab entry (keyblock) contents before passing
it to k5_c_decrypt(). Can we use the key unmodified to pass to the decrypt
functions?
Does anyone have an insight on any manipulations needed (hints on salt
etc). ENCTYPE_DES_CBC_MD5 used.
Please let me know,
Thanks in advance,
Amol
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
