[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SPNEGO, gssapi examples, keytab, cracking passwords, ...

To: Michael B Allen <mba2000@ioplex.com>
Subject: Re: SPNEGO, gssapi examples, keytab, cracking passwords, ...
From: ronnie sahlberg <ronniesahlberg@gmail.com>
Date: Thu, 13 Oct 2005 09:39:51 +1000
Cc: heimdal-discuss@sics.se
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=hPAb+sSk+iFzkLnNyn5653uaZrb6T8jQ1MTGGSqZ2aEMdm4Xfd7EVYSxSEI4WERQefUEYbysOxuozkBjcawVjVtBesAovISHE5Q9B/1KZidEDP4qXcBN7G+iPYz7l5RTofGIrDW4iI90/xYQw4R1OKLyOvq3DbBblAJ45NpyLUw=
In-Reply-To: <20051008032304.3dff12a4.mba2000@ioplex.com>
References: <20051008032304.3dff12a4.mba2000@ioplex.com>
Sender: owner-heimdal-discuss@sics.se

On 10/8/05, Michael B Allen <mba2000@ioplex.com> wrote:

...

5) What is the difference between Kerberos 5 (1.2.840.113554.1.2.2) and
Microsoft Kerberos 5 ( 1.2.840.48018.1.2.2)? Is it just the authorization
data (PAC)?

This was a bug in early windows implementations. Their ASN library were limited so that it could only use 16 bit oid componnets.

So the real value(113554) was truncated to 16 bits and became 48018.

The old buggy value is still accepted by ms as to provide compatibility with hosts that are not patched yet.

I.e. they are the same.

References:
- SPNEGO, gssapi examples, keytab, cracking passwords, ...
  - From: Michael B Allen <mba2000@ioplex.com>

Prev by Date: Easiest way to get service ticket after obtaining tgt
Next by Date: Re: Easiest way to get service ticket after obtaining tgt
Prev by thread: Re: SPNEGO, gssapi examples, keytab, cracking passwords, ...
Next by thread: Enabling arcfour on Heimdal-0.6.3/OpenBSD
Index(es):
- Date
- Thread