[15716] in Kerberos_V5_Development
preauth (I'm a Roomba in a 2'x2' room)
daemon@ATHENA.MIT.EDU (Jeff Blaine)
Tue Apr 27 22:54:06 2010
Message-ID: <4BD7A344.4060801@kickflop.net>
Date: Tue, 27 Apr 2010 22:53:56 -0400
From: Jeff Blaine <jblaine@kickflop.net>
MIME-Version: 1.0
To: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
I still can't make any sense of what is going on here.
What is pa type 95? 85? Neither are mentioned in
src/include/krb5/krb5.h. Does this make any sense to
anyone?
"myplugin" is registered, "illegally" for testing only,
in krb5.h as:
#define KRB5_KEYUSAGE_MYPLUGIN_CLIENT 57 /* jblaine */
#define KRB5_KEYUSAGE_MYPLUGIN_KDC 58 /* jblaine */
#define KRB5_PADATA_MYPLUGIN 150 /* jblaine */
Here's what happens:
[ krb5kdc.log ]
krb5kdc[9605](info): initialized realm MYREALM.OUR.ORG
krb5kdc[9605](info): preauth method timestamp "valid"
krb5kdc[9605](info): preauth method FAST "valid"
krb5kdc[9605](info): preauth method etype-info "valid"
krb5kdc[9605](info): preauth method etype-info2 "valid"
krb5kdc[9605](info): preauth method pw-salt "valid"
krb5kdc[9605](info): preauth method sam-response "valid"
krb5kdc[9605](info): preauth method sam-challenge "valid"
krb5kdc[9605](info): preauth method pac-request "valid"
krb5kdc[9605](info): preauth method Encrypted challenge "valid"
krb5kdc[9605](info): preauth method myplugin "valid"
...
[ here I initiate kinit on client using same codebase+install ]
[ for reference below, type 0x2 is KRB5_PADATA_ENC_TIMESTAMP ]
[ and type 0x13 is KRB5_PADATA_SAM_RESPONSE ]
...
krb5kdc[9606](debug): checking padata
krb5kdc[9606](debug): .. pa_type 0x95
krb5kdc[9606](debug): .. .. failed to find_pa_system
krb5kdc[9606](info): PREAUTH xx.yy.10.113: VALID: authtime 1272421575,
jblaine@MYREALM.OUR.ORG for krbtgt/MYREALM.OUR.ORG@MYREALM.OUR.ORG
krb5kdc[9606](debug): client needs preauth, no hw preauth; request has
no preauth, no hw preauth
krb5kdc[9606](debug): pa_hint of type 0x2
krb5kdc[9606](debug): pa_hint of type 0x13
krb5kdc[9606](info): AS_REQ (4 etypes {18 17 16 23}) xx.yy.10.113:
NEEDED_PREAUTH: jblaine@MYREALM.OUR.ORG for
krbtgt/MYREALM.OUR.ORG@MYREALM.OUR.ORG, Additional pre-authentication
required
krb5kdc[9606](debug): checking padata
krb5kdc[9606](debug): .. pa_type 0x85
krb5kdc[9606](debug): .. .. failed to find_pa_system()
krb5kdc[9606](debug): .. pa_type 0x2
krb5kdc[9606](debug): .. .. type 0x2 is timestamp
krb5kdc[9606](debug): .. .. .. ok
krb5kdc[9606](debug): .. pa_type 0x95
krb5kdc[9606](debug): .. .. failed to find_pa_system()
krb5kdc[9606](info): PREAUTH xx.yy.10.113: VALID: authtime 1272421578,
jblaine@MYREALM.OUR.ORG for krbtgt/MYREALM.OUR.ORG@MYREALM.OUR.ORG
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
