Cannot contact any KDC for real 'TR.LAB' while getting initial credentials

2015-01-18 Thread Zaid Arafeh
Hello, I'd like your help please BackgroundI stood up a test Kerberos KDC with hostname kdc, I can get tickets locally on the kdc itself and I can run kadmin successfully. firewall is disabled on KDCI stood up a host named CLI, I sync'ed the krb5.conf from the KDC. I added the IP address for kdc

RE: Cannot contact any KDC for real 'TR.LAB' while getting initial credentials

2015-01-18 Thread Zaid Arafeh
Attaching one more snapshot to my earlier request. This is from the los From: zara...@live.com To: kerberos@mit.edu Subject: Cannot contact any KDC for real 'TR.LAB' while getting initial credentials Date: Sat, 17 Jan 2015 01:06:27 -0500 Hello, I'd like your help please Backgro

Re: Cannot contact any KDC for real 'TR.LAB' while getting initial credentials

2015-01-18 Thread Greg Hudson
I don't think your image attachments made it through the mailing list server. Single-component KDC hostnames should not cause a problem as long as the client can resolve them. If you are using an MIT krb5 client, the best way to get more insight is to use "env KRB5_TRACE=filename kinit ..." and l

NT hashes in krb5

2015-01-18 Thread Zaid Arafeh
Hello folks, Continuing on with my little project here, I have another question. my project is demonstrate a hash based attack for interoperability between Windows and Linux. (if anyone is interested in learning more we can have a conversation off-line so we don't flood the thread for everyone)

Re: NT hashes in krb5

2015-01-18 Thread Greg Hudson
I'm removing kfwdev from the CC list as there is nothing specific to Kerberos for Windows about the question. On 01/18/2015 08:10 PM, Zaid Arafeh wrote: > Here's the scenario. I am trying to get krb5 to use an NT hash. NT hash is > merely the MD4 computation of the UTC-16LE of the password string

RE: NT hashes in krb5

2015-01-18 Thread Zaid Arafeh
Thanks Greg, If I have the K/M key (which is in the database) and I have the password for the master key, would that make extracting hashes from the database easier? I looked at the keytab file (thnx) , unfortunately keytab files usually don't store the krbtgt key (which is what I am looking for