windows kerberos dump

[Andrew Bartlett]

On Mon, 2012-08-20 at 23:03 +0300, Amit Portnoy wrote:
> I was actually more interested to hear about HOW (or where in the
> code) you read this information from windows active directory (not how
> to use the samba tool).
> 
> 
> I've just spend days trying to figure how to read this information...
> microsoft's documentation seems very inaduqate (where do I get the
> supplementalCredentials and how do I parse it??) and there aren't many
> tools that use this information except samba and some protocol
> sniffing tools (which aren't much help).

supplementalCredentials is an attribute on the user object in AD.  We
have described this attribute in (extended) IDL, and parse it with our
NDR parsing code.  

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org