when I gettgt from a certificate ,I get error show below: python3 gettgtpkinit.py

KDC has no support for PADATA type (pre-authentication data) about pkinittools HOT 4 OPEN

dirkjanm commented on August 16, 2024

KDC has no support for PADATA type (pre-authentication data)

from pkinittools.

Comments (4)

dirkjanm commented on August 16, 2024

Does Rubeus give you the same error? This would indicate that the CA setup of the domain is not complete and the Kerberos service does not (yet) accept PKI based preauthentication.

from pkinittools.

sharp-shooter commented on August 16, 2024

Yes ,so how to resolve the issue, does this attack works?

from pkinittools.

jsdhasfeds commented on August 16, 2024

Hi. Try this "https://support.citrix.com/article/CTX218941". I got the same error and managed to solve it by removing an old certificate issued by a CA that no longer exists then issueing a new certificate using the new CA.

from pkinittools.

jarilaos commented on August 16, 2024

I share this in case someone has the same issue (KDC_ERR_PADATA_TYPE_NOSUPP) and is looking for solutions:
https://github.com/AlmondOffSec/PassTheCert

from pkinittools.

Recommend Projects