s4:kerberos Add 'net export keytab' command for wireshark decryption
authorAndrew Bartlett <abartlet@samba.org>
Mon, 27 Jul 2009 12:04:26 +0000 (22:04 +1000)
committerAndrew Bartlett <abartlet@samba.org>
Mon, 27 Jul 2009 22:52:43 +0000 (08:52 +1000)
commit47a7a2e442c7e006eca8188c6a01707d85c4e61c
tree9f2b209c59230b1a6a84b0ac93fdf4defb71cd27
parent9297b975f58a6c8a8609e05d0bed7b4846a2be32
s4:kerberos Add 'net export keytab' command for wireshark decryption

It is much easier to do decryption with wireshark when the keytab is
available for every host in the domain.  Running 'net export keytab
<keytab name>' will export the current (as pointed to by the supplied
smb.conf) local Samba4 doamin.

(This uses Heimdal's 'hdb' keytab and then the existing hdb-samba4,
and so has a good chance of keeping working in the long term).

Andrew Bartlett
16 files changed:
.gitignore
source4/auth/kerberos/config.mk
source4/auth/kerberos/keytab_copy.c [new file with mode: 0644]
source4/kdc/config.mk
source4/kdc/hdb-samba4.h
source4/kdc/kdc.c
source4/kdc/kdc.h
source4/kdc/pac-glue.c
source4/kdc/pac-glue.h [new file with mode: 0644]
source4/libnet/config.mk
source4/libnet/libnet.h
source4/libnet/libnet_export_keytab.c [new file with mode: 0644]
source4/libnet/libnet_export_keytab.h [new file with mode: 0644]
source4/utils/net/config.mk
source4/utils/net/net.c
source4/utils/net/net_export_keytab.c [new file with mode: 0644]