Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Jim Shi
You can use BouncyCastle lib to get principals from the ticket, if this is what you are looking for. Jim On Tue, 9/30/14, Rick van Rein wrote: Subject: Re: Kerberos5 ticket to ascii converter? To: "Wendy Lin" Cc: "" Date: Tuesday, September 30,

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Tomas Kuthan
On 09/30/14 20:56, Wendy Lin wrote: > On 30 September 2014 18:32, ronnie sahlberg wrote: >> On Tue, Sep 30, 2014 at 9:17 AM, Wendy Lin wrote: >>> On 30 September 2014 17:55, ronnie sahlberg >>> wrote: On Tue, Sep 30, 2014 at 8:25 AM, Wendy Lin wrote: > On 30 September 2014 15:25, Rick

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread ronnie sahlberg
On Tue, Sep 30, 2014 at 11:56 AM, Wendy Lin wrote: > On 30 September 2014 18:32, ronnie sahlberg wrote: >> On Tue, Sep 30, 2014 at 9:17 AM, Wendy Lin wrote: >>> On 30 September 2014 17:55, ronnie sahlberg >>> wrote: On Tue, Sep 30, 2014 at 8:25 AM, Wendy Lin wrote: > On 30 September

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Wendy Lin
On 30 September 2014 18:32, ronnie sahlberg wrote: > On Tue, Sep 30, 2014 at 9:17 AM, Wendy Lin wrote: >> On 30 September 2014 17:55, ronnie sahlberg wrote: >>> On Tue, Sep 30, 2014 at 8:25 AM, Wendy Lin wrote: On 30 September 2014 15:25, Rick van Rein wrote: > Hi, > Does

KRB5KDC_ERR_ETYPE_NOSUPP and enctype negotiation in mixed windows environments

2014-09-30 Thread Ben H
Just discovered an issue in an environment with mixed Win 2003 and 2008 R2 servers that I'm surprised I haven't seen before, nor can find much of anybody reporting it previously. Well known issue: 2003 = Does not support AES 2008 = Supports AES (support for TGT only if Domain Functional Level >=20

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread ronnie sahlberg
On Tue, Sep 30, 2014 at 9:17 AM, Wendy Lin wrote: > On 30 September 2014 17:55, ronnie sahlberg wrote: >> On Tue, Sep 30, 2014 at 8:25 AM, Wendy Lin wrote: >>> On 30 September 2014 15:25, Rick van Rein wrote: Hi, >>> Does Kerberos5 have a ticket to ascii converter so someone can s

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Wendy Lin
On 30 September 2014 17:55, ronnie sahlberg wrote: > On Tue, Sep 30, 2014 at 8:25 AM, Wendy Lin wrote: >> On 30 September 2014 15:25, Rick van Rein wrote: >>> Hi, >>> >> Does Kerberos5 have a ticket to ascii converter so someone can see >> what a ticket looks like in plain text? > >>

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread ronnie sahlberg
On Tue, Sep 30, 2014 at 8:25 AM, Wendy Lin wrote: > On 30 September 2014 15:25, Rick van Rein wrote: >> Hi, >> > Does Kerberos5 have a ticket to ascii converter so someone can see > what a ticket looks like in plain text? You might use any ASN.1 parser to see the structure, with

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Wendy Lin
On 30 September 2014 15:25, Rick van Rein wrote: > Hi, > Does Kerberos5 have a ticket to ascii converter so someone can see what a ticket looks like in plain text? >>> >>> You might use any ASN.1 parser to see the structure, without it actually >>> being spelled out in terms of the Kerb

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Rick van Rein
Hi, >>> Does Kerberos5 have a ticket to ascii converter so someone can see >>> what a ticket looks like in plain text? >> >> You might use any ASN.1 parser to see the structure, without it actually >> being spelled out in terms of the Kerberos field names. > > Is the file format of the ticket c

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Wendy Lin
On 30 September 2014 15:06, Rick van Rein wrote: > Hi, > >> Does Kerberos5 have a ticket to ascii converter so someone can see >> what a ticket looks like in plain text? > > You might use any ASN.1 parser to see the structure, without it actually > being spelled out in terms of the Kerberos field

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Thomas Calderon
Hi, You might also consider using Parsifal, an OCaml-based parsing engine. It is able to process many protocols but in your case, it can parse and print Kerberos messages (binary or PCAP based). Decryption of encrypted parts is still in development. Regards, Thomas Calderon On Tue, Sep 30, 2014

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Rick van Rein
Hi, > Does Kerberos5 have a ticket to ascii converter so someone can see > what a ticket looks like in plain text? You might use any ASN.1 parser to see the structure, without it actually being spelled out in terms of the Kerberos field names. -Rick _

Re: Kerberos5 ticket to ascii converter?

2014-09-30 Thread Tomas Kuthan
On 09/30/14 02:46 PM, Wendy Lin wrote: > Does Kerberos5 have a ticket to ascii converter so someone can see > what a ticket looks like in plain text? Wireshark has a dissector for krb5 messages including the tickets and given appropriate keytab it can even decode encrypted parts. Tomas

Kerberos5 ticket to ascii converter?

2014-09-30 Thread Wendy Lin
Does Kerberos5 have a ticket to ascii converter so someone can see what a ticket looks like in plain text? Wendy Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos