jcmturner / gokrb5

Pure Go Kerberos library for clients and services
Apache License 2.0
717 stars 243 forks source link

Getting valid service KVNO #514

Closed Sireax closed 1 year ago

Sireax commented 1 year ago

Greetings! Can I get a valid service kvno using ASExchange method, or something else? Now it is returning either 0 or 5.

jcmturner commented 1 year ago

The AS response returns the PVNO (Protocol Version Number) not the KVNO. PVNO should always be 5 in this implementation. Seeing 0 may be a bug that needs addressing.

jcmturner commented 1 year ago

I think you can get the KVNO from an ASExchange it should be in ASRep.Ticket.EncPart.KVNO