Wireshark · Ethereal-dev: Re: [Ethereal-dev] kerberos help with automake magic

[ronnie sahlberg <ronniesahlberg@xxxxxxxxx>]

OK   im not too excited about some parts of the patch.
the nettle patch/build will build something that can only be used for
the packetcable  style of kerberos  and which is,  supposedly, not
compatible with how normal kerberos encrypts data.
As long as MIT or Heimdal are the default builds and the
nettle/kerberos   will only be built if some explicit configure option
is specified.


I dont like in particular that it adds a new fileformat.    nothing
wrong if it is a specific packetcable extension,   but then it should
only be available if  manually building with a specific configure
flag.
same problem occurs for cifs people that has a passowrd and not a
keytab,   they use
the external tool ktpass.exe (or whatever it is called) from microsoft
to hash a password into a keytab file.
same thing for the krb4 people if and when they get decryption.

==>   i think they will have to go with the normal (first
implementation wins) fileformat :krb5 keytab files.  it should be
trivial to hack up a native routine to parse keytab files in ethereal 
so no need for any external dlls required for that.
it should be trivial for packetcable people to add to the wiki a small
perl or something tool to convert their (krb4?)  srvtab files into a
krb5 keytab.








On Thu, 14 Oct 2004 22:11:42 -0500, Gerald Combs <gerald@xxxxxxxxxxxx> wrote:
> I suppose it would help if I actually attached the patch in question.
> I'll check if in tomorrow.
>