AS-REQ using SPN

[Ralph Böhme]

On Thu, Nov 16, 2017 at 06:51:54AM +1300, Andrew Bartlett wrote:
> Can you show me the full LDIF for that account, and if at all possible
> a network capture?  

sure.

dn: CN=Foo Foo,CN=Users,DC=riverside,DC=site
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: Foo Foo
sn: Foo
givenName: Foo
distinguishedName: CN=Foo Foo,CN=Users,DC=riverside,DC=site
instanceType: 4
whenCreated: 20170707101907.0Z
whenChanged: 20171115095033.0Z
displayName: Foo Foo
uSNCreated: 25190
uSNChanged: 61535
name: Foo Foo
objectGUID: fe31000a-0c3e-4b16-bf46-b21e7d97404c
userAccountControl: 66048
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 131552130727131730
pwdLastSet: 131552129424158782
primaryGroupID: 513
objectSid: S-1-5-21-4238821236-1081798198-886986080-1106
accountExpires: 9223372036854775807
logonCount: 4
sAMAccountName: foo
sAMAccountType: 805306368
userPrincipalName: foo/win2016.riverside.site at RIVERSIDE.SITE
lockoutTime: 0
servicePrincipalName: foo/win2016.riverside.site
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=riverside,DC=site
dSCorePropagationData: 16010101000000.0Z
lastLogonTimestamp: 131552130336033649

-slow

-- 
Ralph Boehme, Samba Team       https://samba.org/
Samba Developer, SerNet GmbH   https://sernet.de/en/samba/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: as-req-with-spn.pcapng
Type: application/octet-stream
Size: 4076 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20171115/a155df83/as-req-with-spn.obj>