[cifs-protocol] salt used for various principal types

[Sebastian Canevari]

Hi Andrew,

I have some information to share with you.

Attached, you will find a PDF with the modified sections detailing the calculations of the SALT for the various account types.

Please let me know if this answers your request.

Thanks and regards!

Sebas



-----Original Message-----
From: Sebastian Canevari 
Sent: Monday, September 21, 2009 4:30 PM
To: Andrew Bartlett; Interoperability Documentation Help
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: RE: [cifs-protocol] salt used for various principal types

Thanks Andrew,

I'll take care of this and will keep you updated!

Thanks and regards,

Sebastian

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org] 
Sent: Monday, September 21, 2009 2:47 PM
To: Interoperability Documentation Help
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: [cifs-protocol] salt used for various principal types

I can't find any reference in either MS-ADTS or MS-KILE regarding the salt used for for the different types of principals in the kerberos protocol.  (A salt is used as a confounded in string2key operations in
kerberos)

I know there are different salt calculations for users and computers, and presumably again for interdomain trust accounts. See:
http://lists.samba.org/archive/samba-technical/2004-November/037976.html

I asked about this in respect to domain trusts in August 2008, and received an informative reply, but I can't find the algorithm for user/machine accounts written down.  

Thanks,

Andrew Bartlett

--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: MS-KILE-SALT.PDF
Type: application/pdf
Size: 76010 bytes
Desc: MS-KILE-SALT.PDF
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20090928/913f8806/attachment-0001.pdf>