Ticket Granting Ticket forge

Remi Ferrand remi.ferrand at cc.in2p3.fr
Fri Oct 2 04:57:24 EDT 2009


I'm working with MIT Kerberos5 1.6.3

I would like to be able to refresh an existing TGT on my local machine, 
without using the KDC.

My first idea was to decrypt the TGT, modifying its informations (start 
time, end time, renewable time) and encrypt it again.

Is it possible ?
Which key of the KDC do I need to do this little hack ? (the Master Key 
K/M at REALM ?)

I'm reading the source code of the subdir src/kdc/ and especially 
I hope it could work ...

Thanks in advance


Remi Ferrand             | Institut National de Physique Nucleaire
Tel. +33(0) |     et de Physique des Particules
Fax. +33(0) | Centre de Calcul - http://cc.in2p3.fr/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4055 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20091002/8307a86c/attachment.bin

More information about the krbdev mailing list