search for: padata

...sent since last PSH flag: 1361] [PDU Size: 1361] Kerberos Record Mark: 1357 bytes 0... .... .... .... .... .... .... .... = Reserved: Not set .000 0000 0000 0000 0000 0101 0100 1101 = Record Length: 1357 tgs-req pvno: 5 msg-type: krb-tgs-req (12) padata: 2 items PA-DATA PA-TGS-REQ padata-type: kRB5-PADATA-TGS-REQ (1) padata-value: 6e8204603082045ca003020105a10302010ea20703050000... ap-req pvno: 5 msg-type: krb-ap-req (14)...

...String: MYDOMAIN.COM.XYZ enc-part etype: eTYPE-ARCFOUR-HMAC-MD5 (23) authenticator etype: eTYPE-ARCFOUR-HMAC-MD5 (23) PA-DATA PA-FOR-USER padata-type: kRB5-PADATA-S4U2SELF (129) name name-type: kRB5-NT-ENTERPRISE-PRINCIPAL (10) name-string: 1 item KerberosString: kacper_wirski realm: MYDOMAIN.COM.XYZ...

I made some progress with the issue, but didn't solve it completely It's basically a kind of bug (i'm not sure if it's on kerberos side or samba, I think samba is the culprit here (?). Microsoft uses kind of weird SPN for Hyper-V. Weird as there are "spaces" in the string - which is kind of unique as far as SPN's go, usually SPN form a complete string. So I kind

Hello. As I can see this post: https://jira.it.su.se/jira/browse/HEIMDAL-241, at least? Samba 4.0.0alpha5 supported Smart Card logon for Windows XP workstations. Current version (Version 4.0.0alpha14-GIT-77d959f+) does not support smart card logon on Windows XP workstation (but Windows 7 works well). I tried to compare Kerberos traffic examples from genuine domain controller and Samba's

...String: MYDOMAIN.COM.XYZ enc-part etype: eTYPE-ARCFOUR-HMAC-MD5 (23) authenticator etype: eTYPE-ARCFOUR-HMAC-MD5 (23) PA-DATA PA-FOR-USER padata-type: kRB5-PADATA-S4U2SELF (129) name name-type: kRB5-NT-ENTERPRISE-PRINCIPAL (10) name-string: 1 item KerberosString: kacper_wirski realm: MYDOMAIN.COM.XYZ...

...om at FOO.COM, referrals on [14620] 1523708816.549289: Generated subkey for TGS request: aes256-cts/8C96 [14620] 1523708816.549350: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts [14620] 1523708816.549445: Encoding request body and padata into FAST request [14620] 1523708816.549489: Sending request (1552 bytes) to FOO.COM [14620] 1523708816.601328: Resolving hostname foo-ad.foo.com. [14620] 1523708816.601424: Resolving hostname foo-ad.foo.com. [14620] 1523708816.601458: Initiating TCP connection to stream 2620:113:80c0:8080:9c9a:3fb...

On 1/6/2016 10:56 AM, Ole Traupe wrote: > Ok, I updated resolv.conf as you said. Then I restarted the network > service on this member server and afterwords suspended the 1st DC. > Now, kinit gives me again: > > "Cannot contact any KDC for realm 'BPN.TU-BERLIN.DE' while getting > initial credentials" > > Ole > > > Am 05.01.2016 um 13:41 schrieb

...296311: Sending TCP request to stream IP_of_1st_DC:88 [25392] 1452162654.306517: Received answer from stream IP_of_1st_DC:88 [25392] 1452162654.307269: Response was not from master KDC [25392] 1452162654.307329: Processing preauth types: 3 [25392] 1452162654.307338: Received salt "▒▒" via padata type 3 [25392] 1452162654.307346: Produced preauth for next request: (empty) [25392] 1452162654.307362: AS key determined by preauth: aes256-cts/000A [25392] 1452162654.307519: Decrypted AS reply; session key is: aes256-cts/CC03 [25392] 1452162654.307530: FAST negotiation: unavailable [25392] 1452...

...ype: Service and Host (3) Name: root Name: host.example.com Realm: EXAMPLE.COM Server Name (Principal): krbtgt/EXAMPLE.COM Name-type: Principal (1) Name: krbtgt Name: EXAMPLE.COM e-text: Need to use PA-ENC-TIMESTAMP/PA-PK-AS-REQ e-data padata: PA-ENC-TIMESTAMP PA-DASS PA-PK-AS-REP PA-ENCTYPE-INFO PA-ENCTYPE-INFO2 Type: PA-ENC-TIMESTAMP (2) Value: <MISSING> Type: PA-DASS (16) Value: <MISSING> Type: PA-PK-AS-REP (15) Value: <MISSING>...

----- Original Message ----- > From: "samba" <samba at lists.samba.org> > To: "samba" <samba at lists.samba.org> > Sent: Tuesday, October 10, 2017 10:19:29 AM > Subject: Re: [Samba] Opensolaris-ish joins but does not seem to be valid > On Tue, 10 Oct 2017 09:39:43 -0500 (CDT) > Andrew Martin <amartin at xes-inc.com> wrote: > >>

...AD.EXAMPLE.NET, referrals on [17919] 1482170475.951929: Generated subkey for TGS request: rc4-hmac/5B25 [17919] 1482170475.951946: etypes requested in TGS request: aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts [17919] 1482170475.952023: Encoding request body and padata into FAST request [17919] 1482170475.952068: Sending request (1794 bytes) to AD.EXAMPLE.NET [17919] 1482170475.952489: Resolving hostname wrn-dc1.ad.example.net. [17919] 1482170475.952708: Sending initial UDP request to dgram 192.168.5.86:88 [17919] 1482170475.958164: Received answer (107 bytes)...

...krbtgt/EXAMPLE.DE at EXAMPLE.DE after requesting krbtgt/EXAMPLE.DE at EXAMPLE.DE (canonicalize off) [6355] 1509525451.838552: Generated subkey for TGS request: aes256-cts/6A11 [6355] 1509525451.838577: etypes requested in TGS request: aes256-cts [6355] 1509525451.838619: Encoding request body and padata into FAST request [6355] 1509525451.838661: Sending request (2761 bytes) to EXAMPLE.DE [6355] 1509525451.839682: Resolving hostname domdc8.example.de. [6355] 1509525451.839691: Resolving hostname domdc6.example.de. [6355] 1509525451.839694: Resolving hostname domdc7.example.de. [6355] 1509525451.83...

...PLE.DE > after requesting krbtgt/EXAMPLE.DE at EXAMPLE.DE (canonicalize off) > [6355] 1509525451.838552: Generated subkey for TGS request: > aes256-cts/6A11 > [6355] 1509525451.838577: etypes requested in TGS request: aes256-cts > [6355] 1509525451.838619: Encoding request body and padata > into FAST request > [6355] 1509525451.838661: Sending request (2761 bytes) to EXAMPLE.DE > [6355] 1509525451.839682: Resolving hostname domdc8.example.de. > [6355] 1509525451.839691: Resolving hostname domdc6.example.de. > [6355] 1509525451.839694: Resolving hostname domdc7.exampl...

...ter requesting krbtgt/EXAMPLE.DE at EXAMPLE.DE (canonicalize off) >> [6355] 1509525451.838552: Generated subkey for TGS request: >> aes256-cts/6A11 >> [6355] 1509525451.838577: etypes requested in TGS request: aes256-cts >> [6355] 1509525451.838619: Encoding request body and padata >> into FAST request >> [6355] 1509525451.838661: Sending request (2761 bytes) to EXAMPLE.DE >> [6355] 1509525451.839682: Resolving hostname domdc8.example.de. >> [6355] 1509525451.839691: Resolving hostname domdc6.example.de. >> [6355] 1509525451.839694: Resolving hos...

...ut namespaces @@ -340,7 +340,7 @@ nommu-mmap.txt - documentation about no-mmu memory mapping support. numastat.txt - info on how to read Numa policy hit/miss statistics in sysfs. -oops-tracing.txt +admin-guide/oops-tracing.rst - how to decode those nasty internal kernel error dump messages. padata.txt - An introduction to the "padata" parallel execution API @@ -378,7 +378,7 @@ ptp/ - directory with info on support for IEEE 1588 PTP clocks in Linux. pwm.txt - info on the pulse width modulation driver subsystem -ramoops.txt +admin-guide/ramoops.rst - documentation of the ram...

...ut namespaces @@ -340,7 +340,7 @@ nommu-mmap.txt - documentation about no-mmu memory mapping support. numastat.txt - info on how to read Numa policy hit/miss statistics in sysfs. -oops-tracing.txt +admin-guide/oops-tracing.rst - how to decode those nasty internal kernel error dump messages. padata.txt - An introduction to the "padata" parallel execution API @@ -378,7 +378,7 @@ ptp/ - directory with info on support for IEEE 1588 PTP clocks in Linux. pwm.txt - info on the pulse width modulation driver subsystem -ramoops.txt +admin-guide/ramoops.rst - documentation of the ram...

...ut namespaces @@ -340,7 +340,7 @@ nommu-mmap.txt - documentation about no-mmu memory mapping support. numastat.txt - info on how to read Numa policy hit/miss statistics in sysfs. -oops-tracing.txt +admin-guide/oops-tracing.rst - how to decode those nasty internal kernel error dump messages. padata.txt - An introduction to the "padata" parallel execution API @@ -378,7 +378,7 @@ ptp/ - directory with info on support for IEEE 1588 PTP clocks in Linux. pwm.txt - info on the pulse width modulation driver subsystem -ramoops.txt +admin-guide/ramoops.rst - documentation of the ram...

...ut namespaces @@ -340,7 +340,7 @@ nommu-mmap.txt - documentation about no-mmu memory mapping support. numastat.txt - info on how to read Numa policy hit/miss statistics in sysfs. -oops-tracing.txt +admin-guide/oops-tracing.rst - how to decode those nasty internal kernel error dump messages. padata.txt - An introduction to the "padata" parallel execution API @@ -378,7 +378,7 @@ ptp/ - directory with info on support for IEEE 1588 PTP clocks in Linux. pwm.txt - info on the pulse width modulation driver subsystem -ramoops.txt +admin-guide/ramoops.rst - documentation of the ram...

...mk_req.c Compiling heimdal/lib/krb5/mk_req.c Compiling heimdal/lib/krb5/mk_req_ext.c Compiling heimdal/lib/krb5/mk_req_ext.c Compiling heimdal/lib/krb5/mit_glue.c Compiling heimdal/lib/krb5/mit_glue.c Compiling heimdal/lib/krb5/n-fold.c Compiling heimdal/lib/krb5/n-fold.c Compiling heimdal/lib/krb5/padata.c Compiling heimdal/lib/krb5/padata.c Compiling heimdal/lib/krb5/pkinit.c Compiling heimdal/lib/krb5/pkinit.c Compiling heimdal/lib/krb5/plugin.c heimdal/lib/krb5/plugin.c: In function ?load_plugins?: heimdal/lib/krb5/plugin.c:190: warning: unused variable ?d? heimdal/lib/krb5/plugin.c:189: warning...