Authenticating GSSAPI Client to SSPI Service

[Michael B Allen]

On Fri, 9 Feb 2007 08:43:49 +0100
"Peger, Daniel Heinrich" <dpeger at cosa.de> wrote:

> > get a packet capture paying particular attention to the the principal
> > names being used.
> 
> My ASN.1 reading cababilities are very limited but the tickets look just
> fine to me.

Wireshark (formerly Ethereal) will decode the tickets (and some of
the encrypted blocks if you capture the AS-REQ) so there is no need to
read ASN.1.

Mike

-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/