TGS revisited

[Elrond]

Hi Simon,

Using ethereal and kicking it to decrypt parts, I found
another odity, which looks a lot more like our problem.

">>>" signifies the interesting point.
"(+)" just shows a part, that shishi adds, but heimdal
      doesn't. Probably okay.


    Elrond


shishi-client:
        Frame 5 (1361 bytes on wire, 1361 bytes captured)
        Kerberos TGS-REQ
            Pvno: 5
            MSG Type: TGS-REQ (12)
            padata: PA-TGS-REQ
                Type: PA-TGS-REQ (1)
                    Value: 6E8204703082046CA003020105A10302010EA20703050000... 
AP-REQ
                        Pvno: 5
                        MSG Type: AP-REQ (14)
                        Padding: 0
                        APOptions: 00000000
                        Ticket
                        Authenticator rc4-hmac
                            Encryption type: rc4-hmac (23)
(+)                         Kvno: 1
                            Authenticator data: 
9EDF4EC9E3B5AC5D904C4A25721500FAA22DB6EE929F17C9...
                                [Decrypted using: key learnt from frame 4]
                                Authenticator
                                    Authenticator vno: 5
                                    Client Realm: W2K3DOM.SAMBA-TNG.ORG
                                    Client Name (Unknown): elrond
                                    Checksum
>>>>>>>                                 Type: Unknown (65398)
                                        checksum: 
C005E2E3616E85117D7BF005696E386F
                                    cusec: 498666
                                    ctime: 2006-04-23 12:20:07 (Z)
                                    Subkey rc4-hmac
                                    Seq Number: 696249290
            KDC_REQ_BODY

heimdal-client:
        Frame 11 (1339 bytes on wire, 1339 bytes captured)
        Kerberos TGS-REQ
            Pvno: 5
            MSG Type: TGS-REQ (12)
            padata: PA-TGS-REQ
                Type: PA-TGS-REQ (1)
                    Value: 6E82043F3082043BA003020105A10302010EA20703050000... 
AP-REQ
                        Pvno: 5
                        MSG Type: AP-REQ (14)
                        Padding: 0
                        APOptions: 00000000
                        Ticket
                        Authenticator rc4-hmac
                            Encryption type: rc4-hmac (23)
                            Authenticator data: 
33F895E3B9A9DA3CE7D404B4DE1D251C6BFCBA8FFB29E82F...
                                [Decrypted using: key learnt from frame 10]
                                Authenticator
                                    Authenticator vno: 5
                                    Client Realm: W2K3DOM.SAMBA-TNG.ORG
                                    Client Name (Principal): elrond
                                    Checksum
>>>>>>>                                 Type: md5 (7)
                                        checksum: 
C552A4D8830301F555840CAC9D667EC0
                                    cusec: 438314
                                    ctime: 2006-04-23 12:19:54 (Z)
            KDC_REQ_BODY