Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sun, 20 Nov 2005 11:35:49 +0100
From: Frederic Tronel <jtr@...nel.org>
To: john-users@...ts.openwall.com
Subject: How to use kerberos 5 patch

Hi,

I'm trying to use John the ripper with the Kerberos 5 TGT patch.
I have downloaded the patch john-1.6.37-krb5-1.diff.gz and the matching 
version of john the ripper (john-1.6.37.tar.gz). It compiles perfectly.
When I use the --test option it confirms that Kerberos TGT option has been 
enabled:

$ /usr/local/bin/john --test
Benchmarking: Traditional DES [64/64 BS MMX]... DONE
Many salts:     616597 c/s real, 664333 c/s virtual
Only one salt:  610636 c/s real, 615561 c/s virtual

Benchmarking: BSDI DES (x725) [64/64 BS MMX]... DONE
Many salts:     21754 c/s real, 25288 c/s virtual
Only one salt:  20774 c/s real, 21776 c/s virtual

Benchmarking: FreeBSD MD5 [32/32]... DONE
Raw:    5106 c/s real, 5286 c/s virtual

Benchmarking: OpenBSD Blowfish (x32) [32/32]... DONE
Raw:    298 c/s real, 311 c/s virtual

Benchmarking: Kerberos AFS DES [48/64 4K MMX]... DONE
Short:  126109 c/s real, 133012 c/s virtual
Long:   443187 c/s real, 472481 c/s virtual

Benchmarking: NT LM DES [64/64 BS MMX]... DONE
Raw:    4724K c/s real, 5284K c/s virtual

Benchmarking: Kerberos v5 TGT [krb5 3DES (des3-cbc-sha1)]... DONE
Raw:    14145 c/s real, 16217 c/s virtual

I have taken an example ticket from the patch source code:

$ cat ticket
$krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb
76d09fb9cd06faeb0c31b8737f9fdfcde4bd4259c31cb1dff25df39173
......
2c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c08
3a9356a9ee2a28d2e4a01fc7ea90cc8836b8e25650c3a1409b811d0
bad42a59aa418143291d42d7b1e6cb5b1876a4cc758d721323a762
e943f774630385c9faa68df6f3a94422f97

However it seems that I cannot make john works with it (or any other ticket):
$ /usr/local/bin/john ticket
No password hashes loaded
$ /usr/local/bin/john --format=KRB5 ticket
No password hashes loaded

I must be missing something. Any help would be appreciated.

Best regards,

Frederic.

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ