Authenticating GSSAPI Client to SSPI Service
Michael B Allen
mba2000 at ioplex.com
Fri Feb 9 12:07:44 EST 2007
On Fri, 9 Feb 2007 08:43:49 +0100
"Peger, Daniel Heinrich" <dpeger at cosa.de> wrote:
> > get a packet capture paying particular attention to the the principal
> > names being used.
>
> My ASN.1 reading cababilities are very limited but the tickets look just
> fine to me.
Wireshark (formerly Ethereal) will decode the tickets (and some of
the encrypted blocks if you capture the AS-REQ) so there is no need to
read ASN.1.
Mike
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
More information about the Kerberos
mailing list