[Samba] New Windows 8 RSAT and "OU=Domain Controllers" support?

[Andrew Bartlett]

On Wed, 2013-04-24 at 17:39 +0300, Pekka L.J. Jalkanen wrote:
> By the way, is a kerberos keytab actually necessary to decrypt the
> GSS-API packets in Wireshark? Samba Wiki
> (https://wiki.samba.org/index.php/Capture_Packets) doesn't say so (just
> tells to capture the kerberos exchange), but I became somewhat
> suspicious, while reading the following page:
> http://wiki.wireshark.org/Kerberos
> 
> Just trying to figure out how to inspect my own capture here...

Yes, the whole point of GSSAPI security with Kerberos is that without
super-secret-knowledge (the keytab in this case) you can't decrypt a
network sniff.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org