Attachment 1980434 Details for Bug 2060421 – freeipa-4.10.2-1.fc38 no support for enctype on S4U2Proxy

freeipa-4.10.2-1.fc38 no support for enctype on S4U2Proxy

freeipa-4.10.2-1.fc38-s4u2proxy-no_support_for_enctype.txt (text/plain), 55.57 KB, created by Julien Rische on 2023-07-28 12:39:35 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Julien Rische

Created: 2023-07-28 12:39:35 UTC

Size: 55.57 KB

patch

obsolete

>Frame 1: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56418, Dst Port: 88, Seq: 0, Len: 0
>
>Frame 2: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56418, Seq: 0, Ack: 1, Len: 0
>
>Frame 3: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56418, Dst Port: 88, Seq: 1, Ack: 1, Len: 0
>
>Frame 4: 260 bytes on wire (2080 bits), 260 bytes captured (2080 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56418, Dst Port: 88, Seq: 1, Ack: 1, Len: 188
>Kerberos
>    Record Mark: 184 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0000 0000 1011 1000 = Record Length: 184
>    as-req
>        pvno: 5
>        msg-type: krb-as-req (10)
>        padata: 2 items
>            PA-DATA Unknown:150
>                padata-type: Unknown (150)
>                    padata-value: <MISSING>
>            PA-DATA pA-REQ-ENC-PA-REP
>                padata-type: pA-REQ-ENC-PA-REP (149)
>                    padata-value: <MISSING>
>        req-body
>            Padding: 0
>            kdc-options: 40010010
>                0... .... = reserved: False
>                .1.. .... = forwardable: True
>                ..0. .... = forwarded: False
>                ...0 .... = proxiable: False
>                .... 0... = proxy: False
>                .... .0.. = allow-postdate: False
>                .... ..0. = postdated: False
>                .... ...0 = unused7: False
>                0... .... = renewable: False
>                .0.. .... = unused9: False
>                ..0. .... = unused10: False
>                ...0 .... = opt-hardware-auth: False
>                .... 0... = unused12: False
>                .... .0.. = unused13: False
>                .... ..0. = constrained-delegation: False
>                .... ...1 = canonicalize: True
>                0... .... = request-anonymous: False
>                .0.. .... = unused17: False
>                ..0. .... = unused18: False
>                ...0 .... = unused19: False
>                .... 0... = unused20: False
>                .... .0.. = unused21: False
>                .... ..0. = unused22: False
>                .... ...0 = unused23: False
>                0... .... = unused24: False
>                .0.. .... = unused25: False
>                ..0. .... = disable-transited-check: False
>                ...1 .... = renewable-ok: True
>                .... 0... = enc-tkt-in-skey: False
>                .... .0.. = unused29: False
>                .... ..0. = renew: False
>                .... ...0 = validate: False
>            cname
>                name-type: kRB5-NT-SRV-HST (3)
>                cname-string: 2 items
>                    CNameString: host
>                    CNameString: cli.ipa.test
>            realm: IPA.TEST
>            sname
>                name-type: kRB5-NT-SRV-INST (2)
>                sname-string: 2 items
>                    SNameString: krbtgt
>                    SNameString: IPA.TEST
>            till: Jul 26, 2023 18:09:08.000000000 CEST
>            nonce: 1332810079
>            etype: 6 items
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA256-128 (19)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA1-96 (17)
>                ENCTYPE: eTYPE-CAMELLIA256-CTS-CMAC (26)
>                ENCTYPE: eTYPE-CAMELLIA128-CTS-CMAC (25)
>
>Frame 5: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56418, Seq: 1, Ack: 189, Len: 0
>
>Frame 6: 605 bytes on wire (4840 bits), 605 bytes captured (4840 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56418, Seq: 1, Ack: 189, Len: 533
>Kerberos
>    Record Mark: 529 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0000 0010 0001 0001 = Record Length: 529
>    krb-error
>        pvno: 5
>        msg-type: krb-error (30)
>        stime: Jul 25, 2023 18:09:09.000000000 CEST
>        susec: 23968
>        error-code: eRR-PREAUTH-REQUIRED (25)
>        crealm: IPA.TEST
>        cname
>            name-type: kRB5-NT-SRV-HST (3)
>            cname-string: 2 items
>                CNameString: host
>                CNameString: cli.ipa.test
>        realm: IPA.TEST
>        sname
>            name-type: kRB5-NT-SRV-INST (2)
>            sname-string: 2 items
>                SNameString: krbtgt
>                SNameString: IPA.TEST
>        e-text: NEEDED_PREAUTH
>        e-data: 3082016b300aa10402020088a20204003026a103020113a21f041d301b3019a003020112â¦
>            PA-DATA pA-FX-FAST
>                padata-type: pA-FX-FAST (136)
>                    padata-value: <MISSING>
>            PA-DATA pA-ETYPE-INFO2
>                padata-type: pA-ETYPE-INFO2 (19)
>                    padata-value: 301b3019a003020112a1121b103170466d666b447847272b20215c776b
>                        ETYPE-INFO2-ENTRY
>                            etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                            salt: 1pFmfkDxG'+ !\wk
>            PA-DATA pA-PK-AS-REQ
>                padata-type: pA-PK-AS-REQ (16)
>                    padata-value: <MISSING>
>            PA-DATA pA-PKINIT-KX
>                padata-type: pA-PKINIT-KX (147)
>                    padata-value: <MISSING>
>            PA-DATA pA-SPAKE
>                padata-type: pA-SPAKE (151)
>                    padata-value: a1363034a003020101a12204204bdd203d8db09aad233ac3ed8757dbd0ac3f1e491f0d01â¦ challenge
>                        challenge
>                            group: sPAKEGroup-edwards25519 (1)
>                            pubkey: 4bdd203d8db09aad233ac3ed8757dbd0ac3f1e491f0d01c8a01c1ebeed0c791c
>                            factors: 1 item
>                                SPAKESecondFactor
>                                    type: sPAKESecondFactor-SF-NONE (1)
>            PA-DATA pA-ENC-TIMESTAMP
>                padata-type: pA-ENC-TIMESTAMP (2)
>                    padata-value: <MISSING>
>            PA-DATA Unknown:150
>                padata-type: Unknown (150)
>                    padata-value: 64bff3a50000000108ce2449103680162b530a1569f216babedc34245b406872
>            PA-DATA pA-FX-COOKIE
>                padata-type: pA-FX-COOKIE (133)
>                    padata-value: 4d4954310000000153f9fcd1ce95f70fd8500cd73e1057e68793d3ec6454d6d76512d8d4â¦
>
>Frame 7: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56418, Dst Port: 88, Seq: 189, Ack: 534, Len: 0
>
>Frame 8: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56418, Seq: 534, Ack: 189, Len: 0
>
>Frame 9: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56418, Dst Port: 88, Seq: 189, Ack: 535, Len: 0
>
>Frame 10: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56418, Seq: 535, Ack: 190, Len: 0
>
>Frame 11: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56428, Dst Port: 88, Seq: 0, Len: 0
>
>Frame 12: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56428, Seq: 0, Ack: 1, Len: 0
>
>Frame 13: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56428, Dst Port: 88, Seq: 1, Ack: 1, Len: 0
>
>Frame 14: 531 bytes on wire (4248 bits), 531 bytes captured (4248 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56428, Dst Port: 88, Seq: 1, Ack: 1, Len: 459
>Kerberos
>    Record Mark: 455 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0000 0001 1100 0111 = Record Length: 455
>    as-req
>        pvno: 5
>        msg-type: krb-as-req (10)
>        padata: 4 items
>            PA-DATA pA-FX-COOKIE
>                padata-type: pA-FX-COOKIE (133)
>                    padata-value: 4d4954310000000153f9fcd1ce95f70fd8500cd73e1057e68793d3ec6454d6d76512d8d4â¦
>            PA-DATA pA-SPAKE
>                padata-type: pA-SPAKE (151)
>                    padata-value: a2563054a0220420ba7e972377a91f5ebdc66cca54eadc9d8efcf7caea77b72eccec93fdâ¦ response
>                        response
>                            pubkey: ba7e972377a91f5ebdc66cca54eadc9d8efcf7caea77b72eccec93fdee6c36aa
>                            factor
>                                etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                                cipher: 1ac3babfdc8b6cbceaa7a7b6daa0ea0a269351168e592acf627e67d73bcc24e1fc91a7
>            PA-DATA Unknown:150
>                padata-type: Unknown (150)
>                    padata-value: <MISSING>
>            PA-DATA pA-REQ-ENC-PA-REP
>                padata-type: pA-REQ-ENC-PA-REP (149)
>                    padata-value: <MISSING>
>        req-body
>            Padding: 0
>            kdc-options: 40010010
>                0... .... = reserved: False
>                .1.. .... = forwardable: True
>                ..0. .... = forwarded: False
>                ...0 .... = proxiable: False
>                .... 0... = proxy: False
>                .... .0.. = allow-postdate: False
>                .... ..0. = postdated: False
>                .... ...0 = unused7: False
>                0... .... = renewable: False
>                .0.. .... = unused9: False
>                ..0. .... = unused10: False
>                ...0 .... = opt-hardware-auth: False
>                .... 0... = unused12: False
>                .... .0.. = unused13: False
>                .... ..0. = constrained-delegation: False
>                .... ...1 = canonicalize: True
>                0... .... = request-anonymous: False
>                .0.. .... = unused17: False
>                ..0. .... = unused18: False
>                ...0 .... = unused19: False
>                .... 0... = unused20: False
>                .... .0.. = unused21: False
>                .... ..0. = unused22: False
>                .... ...0 = unused23: False
>                0... .... = unused24: False
>                .0.. .... = unused25: False
>                ..0. .... = disable-transited-check: False
>                ...1 .... = renewable-ok: True
>                .... 0... = enc-tkt-in-skey: False
>                .... .0.. = unused29: False
>                .... ..0. = renew: False
>                .... ...0 = validate: False
>            cname
>                name-type: kRB5-NT-SRV-HST (3)
>                cname-string: 2 items
>                    CNameString: host
>                    CNameString: cli.ipa.test
>            realm: IPA.TEST
>            sname
>                name-type: kRB5-NT-SRV-INST (2)
>                sname-string: 2 items
>                    SNameString: krbtgt
>                    SNameString: IPA.TEST
>            till: Jul 26, 2023 18:09:09.000000000 CEST
>            nonce: 1190796132
>            etype: 6 items
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA256-128 (19)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA1-96 (17)
>                ENCTYPE: eTYPE-CAMELLIA256-CTS-CMAC (26)
>                ENCTYPE: eTYPE-CAMELLIA128-CTS-CMAC (25)
>
>Frame 15: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56428, Seq: 1, Ack: 460, Len: 0
>
>Frame 16: 1824 bytes on wire (14592 bits), 1824 bytes captured (14592 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56428, Seq: 1, Ack: 460, Len: 1752
>Kerberos
>    Record Mark: 1748 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0000 0110 1101 0100 = Record Length: 1748
>    as-rep
>        pvno: 5
>        msg-type: krb-as-rep (11)
>        padata: 1 item
>            PA-DATA pA-ETYPE-INFO2
>                padata-type: pA-ETYPE-INFO2 (19)
>                    padata-value: 301b3019a003020112a1121b103170466d666b447847272b20215c776b
>                        ETYPE-INFO2-ENTRY
>                            etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                            salt: 1pFmfkDxG'+ !\wk
>        crealm: IPA.TEST
>        cname
>            name-type: kRB5-NT-PRINCIPAL (1)
>            cname-string: 2 items
>                CNameString: host
>                CNameString: cli.ipa.test
>        ticket
>            tkt-vno: 5
>            realm: IPA.TEST
>            sname
>                name-type: kRB5-NT-SRV-INST (2)
>                sname-string: 2 items
>                    SNameString: krbtgt
>                    SNameString: IPA.TEST
>            enc-part
>                etype: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                kvno: 1
>                cipher: 27bacd27e69b0d47a3fc73fe356440799845466917a4468f35be2529fc5e5697feddceb8â¦
>                    Missing keytype 20 usage 2 (id=missing.1)
>                        [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 (id=missing.1)]
>                            [Missing keytype 20 usage 2 (id=missing.1)]
>                            [Severity level: Warning]
>                            [Group: Decryption]
>                        [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=0)]
>                            [Used keymap=all_keys num_keys=15 num_tries=0)]
>                            [Severity level: Warning]
>                            [Group: Decryption]
>        enc-part
>            etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>            cipher: a0da1612a90433b43e0fd69cb9af8943c6246f41fc0315fc93c3e5bf654b079226b04541â¦
>                Missing keytype 18 usage 3 (id=missing.2)
>                    [Expert Info (Warning/Decryption): Missing keytype 18 usage 3 (id=missing.2)]
>                        [Missing keytype 18 usage 3 (id=missing.2)]
>                        [Severity level: Warning]
>                        [Group: Decryption]
>                    [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=5)]
>                        [Used keymap=all_keys num_keys=15 num_tries=5)]
>                        [Severity level: Warning]
>                        [Group: Decryption]
>    Missing keytype 20 usage 2 missing in frame 16 keytype 20 (id=missing.1 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 missing in frame 16 keytype 20 (id=missing.1 same=0) (00000000...)]
>            [Missing keytype 20 usage 2 missing in frame 16 keytype 20 (id=missing.1 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>    Missing keytype 18 usage 3 missing in frame 16 keytype 18 (id=missing.2 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 18 usage 3 missing in frame 16 keytype 18 (id=missing.2 same=0) (00000000...)]
>            [Missing keytype 18 usage 3 missing in frame 16 keytype 18 (id=missing.2 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>
>Frame 17: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56428, Seq: 1753, Ack: 460, Len: 0
>
>Frame 18: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56428, Dst Port: 88, Seq: 460, Ack: 1753, Len: 0
>
>Frame 19: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56428, Dst Port: 88, Seq: 460, Ack: 1754, Len: 0
>
>Frame 20: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56428, Seq: 1754, Ack: 461, Len: 0
>
>Frame 21: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56444, Dst Port: 88, Seq: 0, Len: 0
>
>Frame 22: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56444, Seq: 0, Ack: 1, Len: 0
>
>Frame 23: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56444, Dst Port: 88, Seq: 1, Ack: 1, Len: 0
>
>Frame 24: 256 bytes on wire (2048 bits), 256 bytes captured (2048 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56444, Dst Port: 88, Seq: 1, Ack: 1, Len: 184
>Kerberos
>    Record Mark: 180 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0000 0000 1011 0100 = Record Length: 180
>    as-req
>        pvno: 5
>        msg-type: krb-as-req (10)
>        padata: 2 items
>            PA-DATA Unknown:150
>                padata-type: Unknown (150)
>                    padata-value: <MISSING>
>            PA-DATA pA-REQ-ENC-PA-REP
>                padata-type: pA-REQ-ENC-PA-REP (149)
>                    padata-value: <MISSING>
>        req-body
>            Padding: 0
>            kdc-options: 00010010
>                0... .... = reserved: False
>                .0.. .... = forwardable: False
>                ..0. .... = forwarded: False
>                ...0 .... = proxiable: False
>                .... 0... = proxy: False
>                .... .0.. = allow-postdate: False
>                .... ..0. = postdated: False
>                .... ...0 = unused7: False
>                0... .... = renewable: False
>                .0.. .... = unused9: False
>                ..0. .... = unused10: False
>                ...0 .... = opt-hardware-auth: False
>                .... 0... = unused12: False
>                .... .0.. = unused13: False
>                .... ..0. = constrained-delegation: False
>                .... ...1 = canonicalize: True
>                0... .... = request-anonymous: False
>                .0.. .... = unused17: False
>                ..0. .... = unused18: False
>                ...0 .... = unused19: False
>                .... 0... = unused20: False
>                .... .0.. = unused21: False
>                .... ..0. = unused22: False
>                .... ...0 = unused23: False
>                0... .... = unused24: False
>                .0.. .... = unused25: False
>                ..0. .... = disable-transited-check: False
>                ...1 .... = renewable-ok: True
>                .... 0... = enc-tkt-in-skey: False
>                .... .0.. = unused29: False
>                .... ..0. = renew: False
>                .... ...0 = validate: False
>            cname
>                name-type: kRB5-NT-ENTERPRISE-PRINCIPAL (10)
>                cname-string: 1 item
>                    CNameString: admin@IPA.TEST
>            realm: IPA.TEST
>            sname
>                name-type: kRB5-NT-SRV-INST (2)
>                sname-string: 2 items
>                    SNameString: krbtgt
>                    SNameString: IPA.TEST
>            till: Jul 25, 2023 18:09:29.000000000 CEST
>            nonce: 781572974
>            etype: 6 items
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                ENCTYPE: eTYPE-CAMELLIA256-CTS-CMAC (26)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA256-128 (19)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA1-96 (17)
>                ENCTYPE: eTYPE-CAMELLIA128-CTS-CMAC (25)
>
>Frame 25: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56444, Seq: 1, Ack: 185, Len: 0
>
>Frame 26: 602 bytes on wire (4816 bits), 602 bytes captured (4816 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56444, Seq: 1, Ack: 185, Len: 530
>Kerberos
>    Record Mark: 526 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0000 0010 0000 1110 = Record Length: 526
>    krb-error
>        pvno: 5
>        msg-type: krb-error (30)
>        stime: Jul 25, 2023 18:09:13.000000000 CEST
>        susec: 561484
>        error-code: eRR-PREAUTH-REQUIRED (25)
>        crealm: IPA.TEST
>        cname
>            name-type: kRB5-NT-ENTERPRISE-PRINCIPAL (10)
>            cname-string: 1 item
>                CNameString: admin@IPA.TEST
>        realm: IPA.TEST
>        sname
>            name-type: kRB5-NT-SRV-INST (2)
>            sname-string: 2 items
>                SNameString: krbtgt
>                SNameString: IPA.TEST
>        e-text: NEEDED_PREAUTH
>        e-data: 3082016b300aa10402020088a20204003026a103020113a21f041d301b3019a003020112â¦
>            PA-DATA pA-FX-FAST
>                padata-type: pA-FX-FAST (136)
>                    padata-value: <MISSING>
>            PA-DATA pA-ETYPE-INFO2
>                padata-type: pA-ETYPE-INFO2 (19)
>                    padata-value: 301b3019a003020112a1121b10755e3d647c61614a5d634e77745c6366
>                        ETYPE-INFO2-ENTRY
>                            etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                            salt: u^=d|aaJ]cNwt\cf
>            PA-DATA pA-PK-AS-REQ
>                padata-type: pA-PK-AS-REQ (16)
>                    padata-value: <MISSING>
>            PA-DATA pA-PKINIT-KX
>                padata-type: pA-PKINIT-KX (147)
>                    padata-value: <MISSING>
>            PA-DATA pA-SPAKE
>                padata-type: pA-SPAKE (151)
>                    padata-value: a1363034a003020101a1220420bd87f44722e11586c3143a238967de146e0206e6507f02â¦ challenge
>                        challenge
>                            group: sPAKEGroup-edwards25519 (1)
>                            pubkey: bd87f44722e11586c3143a238967de146e0206e6507f02fb231c87bc70542f75
>                            factors: 1 item
>                                SPAKESecondFactor
>                                    type: sPAKESecondFactor-SF-NONE (1)
>            PA-DATA pA-ENC-TIMESTAMP
>                padata-type: pA-ENC-TIMESTAMP (2)
>                    padata-value: <MISSING>
>            PA-DATA Unknown:150
>                padata-type: Unknown (150)
>                    padata-value: 64bff3a900000001854b37258c814141440dad001ecb7f29504060b60dd1d359
>            PA-DATA pA-FX-COOKIE
>                padata-type: pA-FX-COOKIE (133)
>                    padata-value: 4d495431000000012aca4c6c4e6b0d7dc650f3f06ee64e09bde17a78c37b63c69438f849â¦
>
>Frame 27: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56444, Seq: 531, Ack: 185, Len: 0
>
>Frame 28: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56444, Dst Port: 88, Seq: 185, Ack: 531, Len: 0
>
>Frame 29: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56444, Dst Port: 88, Seq: 185, Ack: 532, Len: 0
>
>Frame 30: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56444, Seq: 532, Ack: 186, Len: 0
>
>Frame 31: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56448, Dst Port: 88, Seq: 0, Len: 0
>
>Frame 32: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56448, Seq: 0, Ack: 1, Len: 0
>
>Frame 33: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56448, Dst Port: 88, Seq: 1, Ack: 1, Len: 0
>
>Frame 34: 2434 bytes on wire (19472 bits), 2434 bytes captured (19472 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56448, Dst Port: 88, Seq: 1, Ack: 1, Len: 2362
>Kerberos
>    Record Mark: 2358 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0000 1001 0011 0110 = Record Length: 2358
>    tgs-req
>        pvno: 5
>        msg-type: krb-tgs-req (12)
>        padata: 4 items
>            PA-DATA pA-TGS-REQ
>                padata-type: pA-TGS-REQ (1)
>                    padata-value: 6e82062e3082062aa003020105a10302010ea20703050000000000a382054e6182054a30â¦
>                        ap-req
>                            pvno: 5
>                            msg-type: krb-ap-req (14)
>                            Padding: 0
>                            ap-options: 00000000
>                                0... .... = reserved: False
>                                .0.. .... = use-session-key: False
>                                ..0. .... = mutual-required: False
>                            ticket
>                                tkt-vno: 5
>                                realm: IPA.TEST
>                                sname
>                                    name-type: kRB5-NT-SRV-INST (2)
>                                    sname-string: 2 items
>                                        SNameString: krbtgt
>                                        SNameString: IPA.TEST
>                                enc-part
>                                    etype: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                                    kvno: 1
>                                    cipher: 27bacd27e69b0d47a3fc73fe356440799845466917a4468f35be2529fc5e5697feddceb8â¦
>                                        Missing keytype 20 usage 2 (id=missing.1)
>                                            [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 (id=missing.1)]
>                                                [Missing keytype 20 usage 2 (id=missing.1)]
>                                                [Severity level: Warning]
>                                                [Group: Decryption]
>                                            [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=0)]
>                                                [Used keymap=all_keys num_keys=15 num_tries=0)]
>                                                [Severity level: Warning]
>                                                [Group: Decryption]
>                            authenticator
>                                etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                                cipher: b3774fa25e1cc0db5c1e3302cb1984e63a554b012d863f82ace6e432175b886a98a10a3eâ¦
>                                    Missing keytype 18 usage 7 (id=missing.2)
>                                        [Expert Info (Warning/Decryption): Missing keytype 18 usage 7 (id=missing.2)]
>                                            [Missing keytype 18 usage 7 (id=missing.2)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>                                        [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>            PA-DATA pA-FX-FAST
>                padata-type: pA-FX-FAST (136)
>                    padata-value: a08201923082018ea1173015a003020110a10e040c79521db46f491d074af59f65a28201â¦
>                        armored-data
>                            req-checksum
>                                cksumtype: cKSUMTYPE-HMAC-SHA1-96-AES-256 (16)
>                                checksum: 79521db46f491d074af59f65
>                            enc-fast-req
>                                etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                                cipher: 2cf95e07f643e0bbc5fa5c373efa7ad9b6b2ec0aabb4a4e2377f4e49432e7ad23ea20962â¦
>                                    Missing keytype 18 usage 51 (id=missing.3)
>                                        [Expert Info (Warning/Decryption): Missing keytype 18 usage 51 (id=missing.3)]
>                                            [Missing keytype 18 usage 51 (id=missing.3)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>                                        [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>            PA-DATA pA-FOR-X509-USER
>                padata-type: pA-FOR-X509-USER (130)
>                    padata-value: 3057a03c303aa0060204020d3e6fa11b3019a00302010aa11230101b0e61646d696e4049â¦
>                        user-id
>                            nonce: 34422383
>                            cname
>                                name-type: kRB5-NT-ENTERPRISE-PRINCIPAL (10)
>                                name-string: 1 item
>                                    KerberosString: admin@IPA.TEST
>                            crealm: IPA.TEST
>                            Padding: 0
>                            options: 20000000
>                        checksum
>                            cksumtype: cKSUMTYPE-HMAC-SHA1-96-AES-256 (16)
>                            checksum: 673496f803f186e23b1eec32
>            PA-DATA pA-FOR-USER
>                padata-type: pA-FOR-USER (129)
>                    padata-value: 3053a01b3019a00302010aa11230101b0e61646d696e404950412e54455354a10a1b0849â¦
>                        name
>                            name-type: kRB5-NT-ENTERPRISE-PRINCIPAL (10)
>                            name-string: 1 item
>                                KerberosString: admin@IPA.TEST
>                        realm: IPA.TEST
>                        cksum
>                            cksumtype: cKSUMTYPE-HMAC-MD5 (-138)
>                            checksum: 88bd966cfab445fe7d6f7331ce37ccd0
>                        auth: Kerberos
>        req-body
>            Padding: 0
>            kdc-options: 40010000
>                0... .... = reserved: False
>                .1.. .... = forwardable: True
>                ..0. .... = forwarded: False
>                ...0 .... = proxiable: False
>                .... 0... = proxy: False
>                .... .0.. = allow-postdate: False
>                .... ..0. = postdated: False
>                .... ...0 = unused7: False
>                0... .... = renewable: False
>                .0.. .... = unused9: False
>                ..0. .... = unused10: False
>                ...0 .... = opt-hardware-auth: False
>                .... 0... = unused12: False
>                .... .0.. = unused13: False
>                .... ..0. = constrained-delegation: False
>                .... ...1 = canonicalize: True
>                0... .... = request-anonymous: False
>                .0.. .... = unused17: False
>                ..0. .... = unused18: False
>                ...0 .... = unused19: False
>                .... 0... = unused20: False
>                .... .0.. = unused21: False
>                .... ..0. = unused22: False
>                .... ...0 = unused23: False
>                0... .... = unused24: False
>                .0.. .... = unused25: False
>                ..0. .... = disable-transited-check: False
>                ...0 .... = renewable-ok: False
>                .... 0... = enc-tkt-in-skey: False
>                .... .0.. = unused29: False
>                .... ..0. = renew: False
>                .... ...0 = validate: False
>            realm: IPA.TEST
>            sname
>                name-type: kRB5-NT-PRINCIPAL (1)
>                sname-string: 2 items
>                    SNameString: host
>                    SNameString: cli.ipa.test
>            till: Jul 26, 2023 17:25:27.000000000 CEST
>            nonce: 34422383
>            etype: 6 items
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                ENCTYPE: eTYPE-CAMELLIA256-CTS-CMAC (26)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA256-128 (19)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA1-96 (17)
>                ENCTYPE: eTYPE-CAMELLIA128-CTS-CMAC (25)
>    Missing keytype 20 usage 2 missing in frame 34 keytype 20 (id=missing.1 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 missing in frame 34 keytype 20 (id=missing.1 same=0) (00000000...)]
>            [Missing keytype 20 usage 2 missing in frame 34 keytype 20 (id=missing.1 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>    Missing keytype 18 usage 7 missing in frame 34 keytype 18 (id=missing.2 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 18 usage 7 missing in frame 34 keytype 18 (id=missing.2 same=0) (00000000...)]
>            [Missing keytype 18 usage 7 missing in frame 34 keytype 18 (id=missing.2 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>    Missing keytype 18 usage 51 missing in frame 34 keytype 18 (id=missing.3 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 18 usage 51 missing in frame 34 keytype 18 (id=missing.3 same=0) (00000000...)]
>            [Missing keytype 18 usage 51 missing in frame 34 keytype 18 (id=missing.3 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>
>Frame 35: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56448, Seq: 1, Ack: 2363, Len: 0
>
>Frame 36: 1956 bytes on wire (15648 bits), 1956 bytes captured (15648 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56448, Seq: 1, Ack: 2363, Len: 1884
>Kerberos
>    Record Mark: 1880 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0000 0111 0101 1000 = Record Length: 1880
>    tgs-rep
>        pvno: 5
>        msg-type: krb-tgs-rep (13)
>        padata: 1 item
>            PA-DATA pA-FX-FAST
>                padata-type: pA-FX-FAST (136)
>                    padata-value: a082013630820132a082012e3082012aa003020112a28201210482011d395482b27bfbcdâ¦
>                        armored-data
>                            enc-fast-rep
>                                etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                                cipher: 395482b27bfbcd7db9f932ed55cfc74607ded4ecee7f696ba8d60a6c4360d058c5897090â¦
>                                    Missing keytype 18 usage 52 (id=missing.1)
>                                        [Expert Info (Warning/Decryption): Missing keytype 18 usage 52 (id=missing.1)]
>                                            [Missing keytype 18 usage 52 (id=missing.1)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>                                        [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>        crealm: IPA.TEST
>        cname
>            name-type: kRB5-NT-ENTERPRISE-PRINCIPAL (10)
>            cname-string: 1 item
>                CNameString: admin@IPA.TEST
>        ticket
>            tkt-vno: 5
>            realm: IPA.TEST
>            sname
>                name-type: kRB5-NT-PRINCIPAL (1)
>                sname-string: 2 items
>                    SNameString: host
>                    SNameString: cli.ipa.test
>            enc-part
>                etype: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                kvno: 1
>                cipher: e67072565d3fc3bd1ac623c035b364738d9b31b82db25eadc9153ac2af9ebfff95b4f0f3â¦
>                    Missing keytype 20 usage 2 (id=missing.2)
>                        [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 (id=missing.2)]
>                            [Missing keytype 20 usage 2 (id=missing.2)]
>                            [Severity level: Warning]
>                            [Group: Decryption]
>                        [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=0)]
>                            [Used keymap=all_keys num_keys=15 num_tries=0)]
>                            [Severity level: Warning]
>                            [Group: Decryption]
>        enc-part
>            etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>            cipher: a554efa152d434e06a6bd2fc1b9825fba8ed16c229ca638010b9b4f255aa6778286ba7bbâ¦
>                Missing keytype 18 usage 8 (id=missing.3)
>                    [Expert Info (Warning/Decryption): Missing keytype 18 usage 8 (id=missing.3)]
>                        [Missing keytype 18 usage 8 (id=missing.3)]
>                        [Severity level: Warning]
>                        [Group: Decryption]
>                    [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=5)]
>                        [Used keymap=all_keys num_keys=15 num_tries=5)]
>                        [Severity level: Warning]
>                        [Group: Decryption]
>                Missing keytype 18 usage 9 (id=missing.4)
>                    [Expert Info (Warning/Decryption): Missing keytype 18 usage 9 (id=missing.4)]
>                        [Missing keytype 18 usage 9 (id=missing.4)]
>                        [Severity level: Warning]
>                        [Group: Decryption]
>                    [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=5)]
>                        [Used keymap=all_keys num_keys=15 num_tries=5)]
>                        [Severity level: Warning]
>                        [Group: Decryption]
>    Missing keytype 18 usage 52 missing in frame 36 keytype 18 (id=missing.1 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 18 usage 52 missing in frame 36 keytype 18 (id=missing.1 same=0) (00000000...)]
>            [Missing keytype 18 usage 52 missing in frame 36 keytype 18 (id=missing.1 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>    Missing keytype 20 usage 2 missing in frame 36 keytype 20 (id=missing.2 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 missing in frame 36 keytype 20 (id=missing.2 same=0) (00000000...)]
>            [Missing keytype 20 usage 2 missing in frame 36 keytype 20 (id=missing.2 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>    Missing keytype 18 usage 8 missing in frame 36 keytype 18 (id=missing.3 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 18 usage 8 missing in frame 36 keytype 18 (id=missing.3 same=0) (00000000...)]
>            [Missing keytype 18 usage 8 missing in frame 36 keytype 18 (id=missing.3 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>    Missing keytype 18 usage 9 missing in frame 36 keytype 18 (id=missing.4 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 18 usage 9 missing in frame 36 keytype 18 (id=missing.4 same=0) (00000000...)]
>            [Missing keytype 18 usage 9 missing in frame 36 keytype 18 (id=missing.4 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>
>Frame 37: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56448, Seq: 1885, Ack: 2363, Len: 0
>
>Frame 38: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56448, Dst Port: 88, Seq: 2363, Ack: 1885, Len: 0
>
>Frame 39: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.111
>Transmission Control Protocol, Src Port: 56448, Dst Port: 88, Seq: 2363, Ack: 1886, Len: 0
>
>Frame 40: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.111, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 56448, Seq: 1886, Ack: 2364, Len: 0
>
>Frame 41: 80 bytes on wire (640 bits), 80 bytes captured (640 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.117
>Transmission Control Protocol, Src Port: 59940, Dst Port: 88, Seq: 0, Len: 0
>
>Frame 42: 72 bytes on wire (576 bits), 72 bytes captured (576 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.117, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 59940, Seq: 0, Ack: 1, Len: 0
>
>Frame 43: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.117
>Transmission Control Protocol, Src Port: 59940, Dst Port: 88, Seq: 1, Ack: 1, Len: 0
>
>Frame 44: 4581 bytes on wire (36648 bits), 4581 bytes captured (36648 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.117
>Transmission Control Protocol, Src Port: 59940, Dst Port: 88, Seq: 1, Ack: 1, Len: 4521
>Kerberos
>    Record Mark: 4517 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0001 0001 1010 0101 = Record Length: 4517
>    tgs-req
>        pvno: 5
>        msg-type: krb-tgs-req (12)
>        padata: 3 items
>            PA-DATA pA-TGS-REQ
>                padata-type: pA-TGS-REQ (1)
>                    padata-value: 6e82062d30820629a003020105a10302010ea20703050000000000a382054e6182054a30â¦
>                        ap-req
>                            pvno: 5
>                            msg-type: krb-ap-req (14)
>                            Padding: 0
>                            ap-options: 00000000
>                                0... .... = reserved: False
>                                .0.. .... = use-session-key: False
>                                ..0. .... = mutual-required: False
>                            ticket
>                                tkt-vno: 5
>                                realm: IPA.TEST
>                                sname
>                                    name-type: kRB5-NT-SRV-INST (2)
>                                    sname-string: 2 items
>                                        SNameString: krbtgt
>                                        SNameString: IPA.TEST
>                                enc-part
>                                    etype: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                                    kvno: 1
>                                    cipher: 27bacd27e69b0d47a3fc73fe356440799845466917a4468f35be2529fc5e5697feddceb8â¦
>                                        Missing keytype 20 usage 2 (id=missing.1)
>                                            [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 (id=missing.1)]
>                                                [Missing keytype 20 usage 2 (id=missing.1)]
>                                                [Severity level: Warning]
>                                                [Group: Decryption]
>                                            [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=0)]
>                                                [Used keymap=all_keys num_keys=15 num_tries=0)]
>                                                [Severity level: Warning]
>                                                [Group: Decryption]
>                            authenticator
>                                etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                                cipher: 7b27fcb2c8b9cab2f15a11b45efe9777f843364d3d7b41e05290f909061a067d787d8e3eâ¦
>                                    Missing keytype 18 usage 7 (id=missing.2)
>                                        [Expert Info (Warning/Decryption): Missing keytype 18 usage 7 (id=missing.2)]
>                                            [Missing keytype 18 usage 7 (id=missing.2)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>                                        [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>            PA-DATA pA-FX-FAST
>                padata-type: pA-FX-FAST (136)
>                    padata-value: a08205c9308205c5a1173015a003020110a10e040c86f1b6fde7c016a9dcd15256a28205â¦
>                        armored-data
>                            req-checksum
>                                cksumtype: cKSUMTYPE-HMAC-SHA1-96-AES-256 (16)
>                                checksum: 86f1b6fde7c016a9dcd15256
>                            enc-fast-req
>                                etype: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                                cipher: 779e1b7018c534bf5d0d54331f2b077fd09272f835e99d3ce4136c50bc21c7fe245177d6â¦
>                                    Missing keytype 18 usage 51 (id=missing.3)
>                                        [Expert Info (Warning/Decryption): Missing keytype 18 usage 51 (id=missing.3)]
>                                            [Missing keytype 18 usage 51 (id=missing.3)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>                                        [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Used keymap=all_keys num_keys=15 num_tries=5)]
>                                            [Severity level: Warning]
>                                            [Group: Decryption]
>            PA-DATA pA-PAC-OPTIONS
>                padata-type: pA-PAC-OPTIONS (167)
>                    padata-value: 3009a00703050010000000
>                        Padding: 0
>                        flags: 10000000
>                            0... .... = claims: False
>                            .0.. .... = branch-aware: False
>                            ..0. .... = forward-to-full-dc: False
>                            ...1 .... = resource-based-constrained-delegation: True
>        req-body
>            Padding: 0
>            kdc-options: 40030000
>                0... .... = reserved: False
>                .1.. .... = forwardable: True
>                ..0. .... = forwarded: False
>                ...0 .... = proxiable: False
>                .... 0... = proxy: False
>                .... .0.. = allow-postdate: False
>                .... ..0. = postdated: False
>                .... ...0 = unused7: False
>                0... .... = renewable: False
>                .0.. .... = unused9: False
>                ..0. .... = unused10: False
>                ...0 .... = opt-hardware-auth: False
>                .... 0... = unused12: False
>                .... .0.. = unused13: False
>                .... ..1. = constrained-delegation: True
>                .... ...1 = canonicalize: True
>                0... .... = request-anonymous: False
>                .0.. .... = unused17: False
>                ..0. .... = unused18: False
>                ...0 .... = unused19: False
>                .... 0... = unused20: False
>                .... .0.. = unused21: False
>                .... ..0. = unused22: False
>                .... ...0 = unused23: False
>                0... .... = unused24: False
>                .0.. .... = unused25: False
>                ..0. .... = disable-transited-check: False
>                ...0 .... = renewable-ok: False
>                .... 0... = enc-tkt-in-skey: False
>                .... .0.. = unused29: False
>                .... ..0. = renew: False
>                .... ...0 = validate: False
>            realm: AD-UT96.TEST
>            sname
>                name-type: kRB5-NT-SRV-HST (3)
>                sname-string: 2 items
>                    SNameString: cifs
>                    SNameString: dc-ut96.ad-ut96.test
>            till: Jul 26, 2023 17:25:27.000000000 CEST
>            nonce: 503004900
>            etype: 6 items
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
>                ENCTYPE: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                ENCTYPE: eTYPE-CAMELLIA256-CTS-CMAC (26)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA256-128 (19)
>                ENCTYPE: eTYPE-AES128-CTS-HMAC-SHA1-96 (17)
>                ENCTYPE: eTYPE-CAMELLIA128-CTS-CMAC (25)
>            additional-tickets: 1 item
>                Ticket
>                    tkt-vno: 5
>                    realm: IPA.TEST
>                    sname
>                        name-type: kRB5-NT-PRINCIPAL (1)
>                        sname-string: 2 items
>                            SNameString: host
>                            SNameString: cli.ipa.test
>                    enc-part
>                        etype: eTYPE-AES256-CTS-HMAC-SHA384-192 (20)
>                        kvno: 1
>                        cipher: e67072565d3fc3bd1ac623c035b364738d9b31b82db25eadc9153ac2af9ebfff95b4f0f3â¦
>                            Missing keytype 20 usage 2 (id=missing.4)
>                                [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 (id=missing.4)]
>                                    [Missing keytype 20 usage 2 (id=missing.4)]
>                                    [Severity level: Warning]
>                                    [Group: Decryption]
>                                [Expert Info (Warning/Decryption): Used keymap=all_keys num_keys=15 num_tries=0)]
>                                    [Used keymap=all_keys num_keys=15 num_tries=0)]
>                                    [Severity level: Warning]
>                                    [Group: Decryption]
>    Missing keytype 20 usage 2 missing in frame 44 keytype 20 (id=missing.1 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 missing in frame 44 keytype 20 (id=missing.1 same=0) (00000000...)]
>            [Missing keytype 20 usage 2 missing in frame 44 keytype 20 (id=missing.1 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>    Missing keytype 18 usage 7 missing in frame 44 keytype 18 (id=missing.2 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 18 usage 7 missing in frame 44 keytype 18 (id=missing.2 same=0) (00000000...)]
>            [Missing keytype 18 usage 7 missing in frame 44 keytype 18 (id=missing.2 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>    Missing keytype 18 usage 51 missing in frame 44 keytype 18 (id=missing.3 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 18 usage 51 missing in frame 44 keytype 18 (id=missing.3 same=0) (00000000...)]
>            [Missing keytype 18 usage 51 missing in frame 44 keytype 18 (id=missing.3 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>    Missing keytype 20 usage 2 missing in frame 44 keytype 20 (id=missing.4 same=0) (00000000...)
>        [Expert Info (Warning/Decryption): Missing keytype 20 usage 2 missing in frame 44 keytype 20 (id=missing.4 same=0) (00000000...)]
>            [Missing keytype 20 usage 2 missing in frame 44 keytype 20 (id=missing.4 same=0) (00000000...)]
>            [Severity level: Warning]
>            [Group: Decryption]
>
>Frame 45: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.117, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 59940, Seq: 1, Ack: 4522, Len: 0
>
>Frame 46: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.117, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 59940, Seq: 1, Ack: 4522, Len: 100
>Kerberos
>    Record Mark: 96 bytes
>        0... .... .... .... .... .... .... .... = Reserved: Not set
>        .000 0000 0000 0000 0000 0000 0110 0000 = Record Length: 96
>    krb-error
>        pvno: 5
>        msg-type: krb-error (30)
>        stime: Jul 25, 2023 18:09:21.000000000 CEST
>        susec: 726392
>        error-code: eRR-ETYPE-NOSUPP (14)
>        realm: AD-UT96.TEST
>        sname
>            name-type: kRB5-NT-SRV-INST (2)
>            sname-string: 2 items
>                SNameString: krbtgt
>                SNameString: AD-UT96.TEST
>
>Frame 47: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.117
>Transmission Control Protocol, Src Port: 59940, Dst Port: 88, Seq: 4522, Ack: 101, Len: 0
>
>Frame 48: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.37, Dst: 10.0.197.117
>Transmission Control Protocol, Src Port: 59940, Dst Port: 88, Seq: 4522, Ack: 101, Len: 0
>
>Frame 49: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.117, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 59940, Seq: 101, Ack: 4523, Len: 0
>
>Frame 50: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
>Linux cooked capture v2
>Internet Protocol Version 4, Src: 10.0.197.117, Dst: 10.0.197.37
>Transmission Control Protocol, Src Port: 88, Dst Port: 59940, Seq: 101, Ack: 4523, Len: 0
>

Actions: View

Attachments on bug 2060421: 1980434 | 1980834