Hello,
I'd like your help please
BackgroundI stood up a test Kerberos KDC with hostname kdc, I can get tickets
locally on the kdc itself and I can run kadmin successfully. firewall is
disabled on KDCI stood up a host named CLI, I sync'ed the krb5.conf from the
KDC. I added the IP address for kdc
Attaching one more snapshot to my earlier request. This is from the los
From: zara...@live.com
To: kerberos@mit.edu
Subject: Cannot contact any KDC for real 'TR.LAB' while getting initial
credentials
Date: Sat, 17 Jan 2015 01:06:27 -0500
Hello,
I'd like your help please
Backgro
I don't think your image attachments made it through the mailing list
server.
Single-component KDC hostnames should not cause a problem as long as the
client can resolve them. If you are using an MIT krb5 client, the best
way to get more insight is to use "env KRB5_TRACE=filename kinit ..."
and l
Hello folks,
Continuing on with my little project here, I have another question. my project
is demonstrate a hash based attack for interoperability between Windows and
Linux. (if anyone is interested in learning more we can have a conversation
off-line so we don't flood the thread for everyone)
I'm removing kfwdev from the CC list as there is nothing specific to
Kerberos for Windows about the question.
On 01/18/2015 08:10 PM, Zaid Arafeh wrote:
> Here's the scenario. I am trying to get krb5 to use an NT hash. NT hash is
> merely the MD4 computation of the UTC-16LE of the password string
Thanks Greg,
If I have the K/M key (which is in the database) and I have the password for
the master key, would that make extracting hashes from the database easier?
I looked at the keytab file (thnx) , unfortunately keytab files usually don't
store the krbtgt key (which is what I am looking for