[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: krb5_get_init_creds_keytab w/ preauthentication
As Jeffrey said it does handle preauth because when you create a keytab the
need salt information is included which is required for preauth (at least
for DES). If you have a look at Dan Perry's msktutil. In msktpass.c he uses
krb5_get_init_creds_keytab to read a keytab entry for authentication to AD
and to reset the password of the account.
"Michael B Allen" <firstname.lastname@example.org> wrote in message
> Does krb5_get_init_creds_keytab handle preauthentication? I'm
> still studying the code but it doesn't look like it
> does. It's calling krb5_get_in_cred which is listed
> as deprecated. Krb5_get_init_creds_password does handle
> preauthentication. It calls krb5_get_init_creds. I suppose I need to
> modify krb5_get_init_creds_keytab to call krb5_get_init_creds but someone
> please speak up if that sounds like a waste of time.