Hi Jeffrey Altman,
As you have told i have checked the kvno.
kvno in keytab = 2
kvno in service ticket = 2
There is no difference with the kvno in keytab as well as in the service
ticket.
Before extracting the keytab using Win2k3 SP1 ktpass, i reset the
password of that user account then ext
Hi Karl,
Thanks for the information you shared with me.
I have created two user accounts.
Then i have run the ktpass command as show below with appropriate params
for the two new user accounts created
ktpass -mapuser [EMAIL PROTECTED] -princ sp1acc/[EMAIL PROTECTED] +DesOnly
-pass helloworld
Hi,
here's my (random) notes and how i do windows/MIT key exchange
successfully:
with recent versions of MIT Kerberos it is not neccessary to specify any
special enc-type as it supports MD4 (which is windows default now)
i'm also not specifying the ptype flag to ktpass.
the principal you specif
Srini,
capture the traffic on port 88 with ethereal and look at the kdc error
reply. If it is a salt issue it will tell you. The other ktpass option you
might want to try is /ptype KRB5_NT_SRV_HST
Regards
Markus
"Srini" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Hi,
> I ha
Hi,
I have mapped the principal to user account.
Did the salt calculation for DES keys for user account changed from
Win2k3 to Win2k3 SP1?
Can you please let me know or guide me to a link where i can find the
exact salt changes done for DES keys in case of a computer account?
Can anyone tell me th
Hi,
I have used the below command to extract the keytab. You can see that i
have specified the enctype correctly. Please let me know whether i need
to specify any other option to ktpass.
ktpass -mapuser [EMAIL PROTECTED] -princ test/[EMAIL PROTECTED] +DesOnly
-pass helloworld -ptype KRB5_NT_PRIN
Did you map your principal to a user or computer account ? If I remember
right some salt calculation changed for DES keys if assigned to a computer
account. So an old keytab may not work.
Markus
"Srinivas Cheruku" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Hi,
>
> I am using
Is the correct kvno value being written to the keytab entry?
Use the KFW kvno.exe command to find out what
kvno the service principal is using. Then include that value in
the ktpass.exe command line with the -kvno command line
option.
Jeffrey Altman
Srini wrote:
> Hi,
>
> I have used the b
Are you specifying the correct kvno and are you extracting
the correct enctype? 2K3 SP1 supports the export of RC4-HMAC
keys and that might be the new default.
Jeffrey Altman
Srinivas Cheruku wrote:
> Hi,
>
> I am using Win2k3 as my KDC.
>
> I was using the keytab extracted from Win2k3 ktpa
Hi,
I am using Win2k3 as my KDC.
I was using the keytab extracted from Win2k3 ktpass
and it was working fine with my GSS applications. I
have upgraded to Win2k3 SP1 and now when i use ktpass
of Win2k3 SP1 to extract the keytab and use it with my
GSS application, i am getting error on the GSS ser
10 matches
Mail list logo
