Attachment 16341 Details for Bug 14557 – the cleartext decode of the LDAP bind with Kerberos

the cleartext decode of the LDAP bind with Kerberos

foo.txt (text/plain), 3.56 KB, created by Andrew Bartlett on 2020-11-17 01:34:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Andrew Bartlett

Created: 2020-11-17 01:34:12 UTC

Size: 3.56 KB

patch

obsolete

>Lightweight Directory Access Protocol
>    LDAPMessage bindRequest(2) "<ROOT>" sasl
>        messageID: 2
>        protocolOp: bindRequest (0)
>            bindRequest
>                version: 3
>                name: 
>                authentication: sasl (3)
>                    sasl
>                        mechanism: GSS-SPNEGO
>                        credentials: 60820c3f06062b0601050502a0820c3330820c2fa0243022â¦
>                        GSS-API Generic Security Service Application Program Interface
>                            OID: 1.3.6.1.5.5.2 (SPNEGO - Simple Protected Negotiation)
>                            Simple Protected Negotiation
>                                negTokenInit
>                                    mechTypes: 3 items
>                                    mechToken: 60820bfd06092a864886f71201020201006e820bec30820bâ¦
>                                    krb5_blob: 60820bfd06092a864886f71201020201006e820bec30820bâ¦
>                                        KRB5 OID: 1.2.840.113554.1.2.2 (KRB5 - Kerberos 5)
>                                        krb5_tok_id: KRB5_AP_REQ (0x0001)
>                                        Kerberos
>                                            ap-req
>                                                pvno: 5
>                                                msg-type: krb-ap-req (14)
>                                                Padding: 0
>                                                ap-options: 20000000
>                                                ticket
>                                                    tkt-vno: 5
>                                                    realm: ADDOM.SAMBA.EXAMPLE.COM
>                                                    sname
>                                                        name-type: kRB5-NT-PRINCIPAL (1)
>                                                        sname-string: 2 items
>                                                            SNameString: ldap
>                                                            SNameString: addc
>                                                    enc-part
>                                                        etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                                                        kvno: 1
>                                                        cipher: f8e58a661a8e19393c701c8ca0b9aff9f3d2b38ba8f331f4â¦
>                                                authenticator
>                                                    etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                                                    cipher: 18f7fa3cfc8348ab12401d6641a479ae7a75d06e34e8ad3eâ¦
>                                                        authenticator
>                                                            authenticator-vno: 5
>                                                            crealm: ADDOM.SAMBA.EXAMPLE.COM
>                                                            cname
>                                                                name-type: kRB5-NT-PRINCIPAL (1)
>                                                                cname-string: 1 item
>                                                            cksum
>                                                            cusec: 600302
>                                                            ctime: 2020-11-17 01:12:35 (UTC)
>                                                            subkey
>                                                            seq-number: 131126817
>                                                            authorization-data: 1 item
>        [Response In: 205]

Actions: View

Attachments on bug 14557: 16339 | 16340 | 16341 | 16342 | 16343 | 16351 | 16925 | 16940