[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 21 Nov 2005 11:29:19 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: How to use kerberos 5 patch
Hi Frederic,
On Sun, Nov 20, 2005 at 11:35:49AM +0100, Frederic Tronel wrote:
> Benchmarking: Kerberos v5 TGT [krb5 3DES (des3-cbc-sha1)]... DONE
> Raw: 14145 c/s real, 16217 c/s virtual
Great.
> I have taken an example ticket from the patch source code:
>
> $ cat ticket
> $krb5$oskov$ACM.UIUC.EDU$4730d7249765615d6f3652321c4fb
> 76d09fb9cd06faeb0c31b8737f9fdfcde4bd4259c31cb1dff25df39173
> ......
> 2c2265a4ffc72e9fb811da17c7f2887ccb17e2f87cd1f6c28a9afc0c08
> 3a9356a9ee2a28d2e4a01fc7ea90cc8836b8e25650c3a1409b811d0
> bad42a59aa418143291d42d7b1e6cb5b1876a4cc758d721323a762
> e943f774630385c9faa68df6f3a94422f97
There are two problems here:
1. John expects the file to have a format similar to that of /etc/passwd.
At least two colon-separated fields are required: a username and a
password hash. So you need to introduce "usernames" or any identifiers
in their place.
2. The example TGT encodings given in the patch are almost 500
characters long each. When you put them into a file for John to use,
you need to include exactly one TGT encoding per line. You must not
wrap the long encodings.
> $ /usr/local/bin/john ticket
FWIW, when you're installing John system-wide like that, you might want
to define JOHN_SYSTEMWIDE to 1 in params.h, -- or simply not install
John system-wide (this is a feature primarily for use by John packages
in Linux and *BSD distributions).
--
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598 fp: 6429 0D7E F130 C13E C929 6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments
Was I helpful? Please give your feedback here: http://rate.affero.net/solar
Powered by blists - more mailing lists
Powered by Openwall GNU/*/Linux -
Powered by OpenVZ
