AS-REQ service tickets

John Wray <[email protected]> Wed, 16 Aug 2023 22:22:01 +0000

Newsgroups	gmane.comp.encryption.kerberos.devel
Message-ID	<SA0PR15MB3838BD46D7BABB7BC9C7C1CD8C15A@SA0PR15MB3838.namprd15.prod.outlook.com>

I believe it should be possible to obtain a service ticket to a server within the local realm directly using an AS-REQ from krb5_get_init_creds_keytab()/password() by specifying the target server name instead of the TGS in the in_tkt_service parameter.

Has anyone noticed any change in tickets obtained this way from Microsoft Domain Controllers after a recent security update?  None of the CVEs mentioned seem to relate to this KDC behavior.

John
_______________________________________________
krbdev mailing list             [email protected]
https://mailman.mit.edu/mailman/listinfo/krbdev