Skip to content

tomciaaa/Base64KeytabGenerator

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 

Repository files navigation

Base64KeytabGenerator

A simple (example) keytab generator that writes output to STDOUT in base64 encoded form. This is useful when generating the keytab to be stored in an external vault without storing sensitive data on the hard drive.

Gotchas

This thing only works by tapping into the Java internal classes, which as of Java 8 are still easy to (ab)use but Java 9 features such as modules will make it much harder (if not impossible). There are odly few decent implementations of low-level Kerberos code and while the Keytab format is relatively straight-forward (see official MIT Kerberos docs) the way to calculate the key at least from a cursory glance requires running standard crypto but in a very special setting (for example see comments on Java classes and the referenced RFC-3961 and RFC-3962).

TL;DR abusing Java internals was better than rolling my own crypto :)

About

Base64-encoded keytab generator

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages