[18808] in Kerberos_V5_Development
RE: TGS-REP TICKET decrypting problem
daemon@ATHENA.MIT.EDU (Zheng, Kai)
Tue Jun 10 10:14:55 2014
From: "Zheng, Kai" <kai.zheng@intel.com>
To: somenath saha <saha.somenath.88@gmail.com>,
Wang Weijun
<weijun.wang@oracle.com>
Date: Tue, 10 Jun 2014 14:14:09 +0000
Message-ID: <8D5F7E3237B3ED47B84CF187BB17B666118D87E6@SHSMSX103.ccr.corp.intel.com>
In-Reply-To: <CAKSryKXtLhrZJw2QHy0Z2XuwJVA0_ZiGyir+ff1BdMt-Epe64A@mail.gmail.com>
Content-Language: en-US
MIME-Version: 1.0
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Perhaps you can export the keys for the server principal into keytab file if you can access the KDC. Many application servers use keytab to get the decryption key when validates client ticket. I'm not sure there're existing tool that allows to repeat the process buried in Kerberos implementation to create the exact keys. It also depends on what encryption type you're using.
Kai
-----Original Message-----
From: krbdev-bounces@mit.edu [mailto:krbdev-bounces@mit.edu] On Behalf Of somenath saha
Sent: Tuesday, June 10, 2014 9:56 PM
To: Wang Weijun
Cc: krbdev@mit.edu
Subject: Re: TGS-REP TICKET decrypting problem
thanks guys,
It will help me to find out the secret key of server. but my initial question is not that. i want to know that how to create this secret key. i mean, in order to create this secret key what argument is needed. Because i want to decrypt the ticket (which i got from TGS_REP) from server side and my question is that how to prepare this secret key (what is the
credential?) and how i got this credential... help me out guys
regards
somenath
On Tue, Jun 10, 2014 at 4:49 PM, Wang Weijun <weijun.wang@oracle.com> wrote:
>
> On Jun 10, 2014, at 19:11, somenath saha <saha.somenath.88@gmail.com>
> wrote:
>
> > currently i try to use NTDSXtract tool. I think esedbexport works
> > only
> in UNIX. am i right max?
>
> Maybe. I compile/run esedbexport and run dskeytab.py on a Mac. I
> suppose Linux should also works.
>
> --Max
>
>
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
