Build Information:
This patch was made using wireshark-1.10.0.
--
This adds support for RFC 6113 FAST PA-Data types. Here is the patch:
--- wireshark-1.10.0/epan/dissectors/packet-kerberos.c 2013-04-22
13:05:16.000000000 -0500
+++ wireshark-1.10.0.fast/epan/dissectors/packet-kerberos.c 2013-07-24
18:55:07.263015991 -0500
@@ -1094,6 +1094,15 @@
#define KRB5_PA_PAC_REQUEST 128 /* (Microsoft extension) */
#define KRB5_PA_FOR_USER 129 /* Impersonation (Microsoft
extension) See [MS-SFU] */
+#define KRB5_PADATA_S4U_X509_USER 130 /* certificate protocol transition
request */
+#define KRB5_PADATA_FX_COOKIE 133
+#define KRB5_PADATA_FX_FAST 136
+#define KRB5_PADATA_FX_ERROR 137
+#define KRB5_PADATA_ENCRYPTED_CHALLENGE 138
+#define KRB5_PADATA_PKINIT_KX 147
+#define KRB5_ENCPADATA_REQ_ENC_PA_REP 149
+
+
#define KRB5_PA_PROV_SRV_LOCATION 0xffffffff /* (gint32)0xFF) packetcable
stuff */
/* Principal name-type */
@@ -1338,6 +1347,13 @@
{ KRB5_TD_REQ_SEQ , "TD-REQ-SEQ" },
{ KRB5_PA_PAC_REQUEST , "PA-PAC-REQUEST" },
{ KRB5_PA_FOR_USER , "PA-FOR-USER" },
+ { KRB5_PADATA_S4U_X509_USER , "PA-S4U-X509-USER" },
+ { KRB5_PADATA_FX_COOKIE , "PA-FX-COOKIE" },
+ { KRB5_PADATA_FX_FAST , "PA-FX-FAST" },
+ { KRB5_PADATA_FX_ERROR , "PA-FX-ERROR" },
+ { KRB5_PADATA_ENCRYPTED_CHALLENGE , "PA-ENCRYPTED-CHALLENGE" },
+ { KRB5_PADATA_PKINIT_KX , "PA-PKINIT-KX" },
+ { KRB5_ENCPADATA_REQ_ENC_PA_REP , "PA-REQ-ENC-PA-REP" },
{ KRB5_PA_PROV_SRV_LOCATION , "PA-PROV-SRV-LOCATION" },
{ 0 , NULL },
};
--- wireshark-1.10.0/asn1/kerberos/packet-kerberos-template.c 2013-04-22
13:04:16.000000000 -0500
+++ wireshark-1.10.0.fast/asn1/kerberos/packet-kerberos-template.c
2013-07-24 19:11:46.482995493 -0500
@@ -849,6 +849,14 @@
#define KRB5_PA_PAC_REQUEST 128 /* (Microsoft extension) */
#define KRB5_PA_FOR_USER 129 /* Impersonation (Microsoft
extension) See [MS-SFU] */
+#define KRB5_PADATA_S4U_X509_USER 130 /* certificate protocol transition
request */
+#define KRB5_PADATA_FX_COOKIE 133
+#define KRB5_PADATA_FX_FAST 136
+#define KRB5_PADATA_FX_ERROR 137
+#define KRB5_PADATA_ENCRYPTED_CHALLENGE 138
+#define KRB5_PADATA_PKINIT_KX 147
+#define KRB5_ENCPADATA_REQ_ENC_PA_REP 149
+
#define KRB5_PA_PROV_SRV_LOCATION 0xffffffff /* (gint32)0xFF) packetcable
stuff */
/* Principal name-type */
#define KRB5_NT_UNKNOWN 0
@@ -1091,6 +1099,13 @@
{ KRB5_TD_REQ_SEQ , "TD-REQ-SEQ" },
{ KRB5_PA_PAC_REQUEST , "PA-PAC-REQUEST" },
{ KRB5_PA_FOR_USER , "PA-FOR-USER" },
+ { KRB5_PADATA_S4U_X509_USER , "PA-S4U-X509-USER" },
+ { KRB5_PADATA_FX_COOKIE , "PA-FX-COOKIE" },
+ { KRB5_PADATA_FX_FAST , "PA-FX-FAST" },
+ { KRB5_PADATA_FX_ERROR , "PA-FX-ERROR" },
+ { KRB5_PADATA_ENCRYPTED_CHALLENGE , "PA-ENCRYPTED-CHALLENGE" },
+ { KRB5_PADATA_PKINIT_KX , "PA-PKINIT-KX" },
+ { KRB5_ENCPADATA_REQ_ENC_PA_REP , "PA-REQ-ENC-PA-REP" },
{ KRB5_PA_PROV_SRV_LOCATION , "PA-PROV-SRV-LOCATION" },
{ 0 , NULL },
};
