john-users - Re: How to use kerberos 5 patch

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Mon, 21 Nov 2005 11:29:19 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: How to use kerberos 5 patch

Hi Frederic,

On Sun, Nov 20, 2005 at 11:35:49AM +0100, Frederic Tronel wrote:
> Benchmarking: Kerberos v5 TGT [krb5 3DES (des3-cbc-sha1)]... DONE
> Raw:    14145 c/s real, 16217 c/s virtual

Great.

> I have taken an example ticket from the patch source code:
> 
> $ cat ticket
> $krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb
> 76d09fb9cd06faeb0c31b8737f9fdfcde4bd4259c31cb1dff25df39173
> ......
> 2c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c08
> 3a9356a9ee2a28d2e4a01fc7ea90cc8836b8e25650c3a1409b811d0
> bad42a59aa418143291d42d7b1e6cb5b1876a4cc758d721323a762
> e943f774630385c9faa68df6f3a94422f97

There are two problems here:

1. John expects the file to have a format similar to that of /etc/passwd.
At least two colon-separated fields are required: a username and a
password hash.  So you need to introduce "usernames" or any identifiers
in their place.

2. The example TGT encodings given in the patch are almost 500
characters long each.  When you put them into a file for John to use,
you need to include exactly one TGT encoding per line.  You must not
wrap the long encodings.

> $ /usr/local/bin/john ticket

FWIW, when you're installing John system-wide like that, you might want
to define JOHN_SYSTEMWIDE to 1 in params.h, -- or simply not install
John system-wide (this is a feature primarily for use by John packages
in Linux and *BSD distributions).

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar