[24265] in Kerberos

home help back first fref pref prev next nref lref last post

Decrypting a kerberos session

daemon@ATHENA.MIT.EDU (x_coder@hotmail.com)
Sat Jul 9 21:08:34 2005

From: x_coder@hotmail.com
Date: 9 Jul 2005 10:10:01 -0700
Message-ID: <1120929001.758891.310540@g14g2000cwa.googlegroups.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

Hi,
I wish to intercept traffic from the client to a server and decrypt it.



The messages are encrypted (keys are setup via kerberos KR5).


To do the decryption, I would need the server's long term key (the long



term key that is stored in and maintained by the kerberos key
distribution center KDC).


On windows server operating systems, how can I get a server's (say file



server's) long term key from the KDC (domain controller)?  This is the
key that would have been generated when the file server joined the
domain.


Obviously I am assuming I have admin access to the domain controller...



Thanks 
Lyle

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post