Decoding kerberos

[x_coder]

Hi,
I wish to intercept traffic from the client to a server and decrypt it.



The messages are encrypted (keys are setup via kerberos KR5).


To do the decryption, I would need the server's long term key (the long



term key that is stored in and maintained by the kerberos key
distribution center KDC).


On windows server operating systems, how can I get a server's (say file



server's) long term key from the KDC (domain controller)? This is the
key that would have been generated when the file server joined the
domain.


Obviously I am assuming I have admin access to the domain controller...



Thanks
Lyle

 

[Mike Shepperd]

Maybe this would be easier to explain and/or understand if you could fill us
in on what exactly you're trying to accomplish. Are you trying to write a
parser for the Kerb traffic, or crack into the protocol for some other
purpose? Is this Windows specific or kerberos specific?