Using MIT ticket on Windows

ashish khandelwal ashishkwal99 at gmail.com
Tue Jul 26 14:18:47 EDT 2011


I am trying to use MIT kerberos ticket for SSO on Windows. I am
performing the following steps to achieve that:

1. Generate MIT kerberos TGT and service ticket on Linux
2. Copy the TGT and service ticket to Windows computer
3. Read the MIT Kerberos TGT and service ticket and use them in
Windows API LsaLogonUser with KERB_INTERACTIVE_LOGON structure

The LsaLogonUser API returns error code 0xc000009a -
STATUS_INSUFFICIENT_RESOURCES. On looking at MIT kerberos ticket and
Windows Kerberos ticket (obtained using Windows APIs) in binary editor
it looks like both have different format. It looks like the MIT
kerberos ticket format and windows kerberos ticket formats are not
compatible.

Does anyone know whether this (using MIT kerberos ticket with Windows
API) is possible ? What are the differences in the format of MIT
kerberos ticket and Windows Kerberos ticket ? Is there any way to
convert MIT kerberos ticket to Windows Kerberos ticket format ?

I am really stuck at this point. Any suggestions or help would be
great.



More information about the Kerberos mailing list