e-data field in KRB-ERROR from microsoft clients when ERR_SKEW is issued

Luke Howard lukeh at padl.com
Mon Sep 18 18:02:18 EDT 2006

>But you haven't finished decoding.  02 01 02 is an INTEGER with value 2.
>This sequence looks like a PA-DATA with type pa-enc-timestamp and no value. 
>In other words, almost (but not quite) exactly like what the e-data for 
>KDC_ERR_PREAUTH_REQUIRED should look like.

Not sure if it is related by the MS KDC does encode NT status codes in
e-data. There was some discussion on samba-technical about how this is
done (I don't have a reference on hand, sorry).

-- Luke


More information about the krbdev mailing list