require information on kerberos settings for Mac mini

2015-01-20 Thread Dharani Kumar Behera
Dear Team, I have McAfee Web Gateway proxy, for Mac mini users i am deploying Kerberos authentication on it for other windows machines NTLM is there. After creation of a kerberos user on AD and keytab generation and the keytab file also uploaded in the web gateway. The main issue is the Mac m

RE: Cannot contact any KDC for real 'TR.LAB' while getting initial credentials

2015-01-20 Thread Zaid Arafeh
Thanks Greg, I figured it out after a while. I am noob in Linux :) I was using the wrong command to open ports through the firewall. When I opened port 88 and 749 (with the right command this time) it worked correctly. I have another questions I will create a new thread Thanks > Date: Sun, 18

Re: NT hashes in krb5

2015-01-20 Thread Greg Hudson
On 01/19/2015 02:24 AM, Zaid Arafeh wrote: > If I have the K/M key (which is in the database) and I have the password > for the master key, would that make extracting hashes from the database > easier? It is possible but not convenient; you would have to write code to do the decryption. > I looke

RE: NT hashes in krb5

2015-01-20 Thread Zaid Arafeh
Hello Greg and all, I have the krbtgt password now.. I reset the password and using a manually entered one (beauty of a lab) I want to create a a TGT in ASN1 format. I have a tool that creates custom tickets for Windows (metasploit), it takes three parameters 1- rc4 hash of krbtgt password 2-

RE: NT hashes in krb5

2015-01-20 Thread Benjamin Kaduk
On Mon, 19 Jan 2015, Zaid Arafeh wrote: > If I have the K/M key (which is in the database) and I have the password > for the master key, would that make extracting hashes from the database > easier? I looked at the keytab file (thnx) , unfortunately keytab files > usually don't store the krbtgt ke

RE: NT hashes in krb5

2015-01-20 Thread Zaid Arafeh
Thanks Benjamin, I agree that krbtgt key is a random key, but I set it to a certain password for the purpose of this experiment. What I am trying to get to, is to have the krbtgt key, so I can create custom tgt's and inject them directly into the cash. I do have the krbtgt key now, which will be

Re: NT hashes in krb5

2015-01-20 Thread Greg Hudson
On 01/20/2015 12:08 AM, Zaid Arafeh wrote: > My questions are > 1- are there structural differences between MS tickets and MIT tickets? The tickets themselves are in the same format, defined by RFC 4120. But they are stored in different ways. MIT krb5 generally stores tickets in a FILE ccache, w