string-to-key in Windows Server 2003

Ben Cox cox-work at djehuti.com
Fri Jun 27 10:49:06 EDT 2003


Thanks Gents -

On Thu, 2003-06-26 at 17:03, Kevin Coffman wrote:
> Most errors of this type (works against W2K, but not W2K3), that I have
> heard of, had to do with the 2003 server trying to switch to TCP because the
> packet has become too big.  It seems that either they are putting more in
> the PAC, or W2K3 tries to switch earlier than W2K did.

I thought about that, but I believe that error is distinguishable from
KRB5_PREAUTH_FAILED, right?


On Thu, 2003-06-26 at 17:06, Sam Hartman wrote: 
> I've certainly seen it use Administrator rather than administrator as
> part of a salt in the case of the administrator principal.  I don't
> know about other principals and whether the salt has changed.

Thanks.  I'll double-check the case.

Meanwhile if anyone else has any other suggestions or hard info, I look
forward to hearing them.

Thanks,

-- Ben




More information about the Kerberos mailing list