> It doesn't have to
> do much, because kadmin is an RPC protocol and the request
> is always encoded
> using RPCSEC_GSS with privacy.
>
> Presumably you meant "it can't do much" - it's not that it
> doesn't have
> it, it's that we don't decrypt RPCSEC_GSS-with-privacy
> traffic (to do so
> would presumably require that the necessary keys be supplied to
> Ethereal).
Yes.
> > This dissector works well with Solaris
> > kadmin requests, but not so well with MIT's kadmin, since it uses a
> > different RPC authentication flavor that Ethereal does not
> recognize.
>
> What authentication flavor is that?
AUTH_GSSAPI = 300001.
-Tony