diff options
| author | Ronnie Sahlberg <ronnie_sahlberg@ozemail.com.au> | 2006-04-03 08:55:04 +0000 |
|---|---|---|
| committer | Ronnie Sahlberg <ronnie_sahlberg@ozemail.com.au> | 2006-04-03 08:55:04 +0000 |
| commit | 10a0fd2105cb51715baf87235c73c87bffa99c02 (patch) | |
| tree | f9e90b0b783001aa50c4ebbc9e339d3f50343dcd /epan/dissectors | |
| parent | f886744b64098c60101ccd9234fede0638e212d0 (diff) | |
a krb_error pdu with the error_code ERR_CLIENT_REVOKED
issued by ms kdc contains a PA_DATA structure with a salt that contains an
nt_status code explaining why the client was not allowed to get a (tgt) ticket
svn path=/trunk/; revision=17796
Diffstat (limited to 'epan/dissectors')
| -rw-r--r-- | epan/dissectors/packet-kerberos.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/epan/dissectors/packet-kerberos.c b/epan/dissectors/packet-kerberos.c index 9b2630bc09..c2623b05f2 100644 --- a/epan/dissectors/packet-kerberos.c +++ b/epan/dissectors/packet-kerberos.c @@ -3863,6 +3863,13 @@ static int dissect_krb5_e_data(packet_info *pinfo, proto_tree *tree, tvbuff_t *tvb, int offset) { switch(krb5_errorcode){ + case KRB5_ET_KRB5KDC_ERR_CLIENT_REVOKED: + /* ms windows kdc sends e-data of this type containing a "salt" + * that contains the nt_status code when people try to log in + * outside of the hours allowed. + */ + offset=dissect_ber_octet_string_wcb(FALSE, pinfo, tree, tvb, offset, hf_krb_e_data, dissect_krb5_PA_DATA); + break; case KRB5_ET_KRB5KDC_ERR_PREAUTH_REQUIRED: case KRB5_ET_KRB5KDC_ERR_PREAUTH_FAILED: offset=dissect_ber_octet_string_wcb(FALSE, pinfo, tree, tvb, offset, hf_krb_e_data, dissect_krb5_padata); |