Updated params

yarox24 · Mar 15, 2023 · e18dda2 · e18dda2
1 parent 521b488
commit e18dda2
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/maps/params/NTStatus.yaml b/maps/params/NTStatus.yaml
@@ -36,6 +36,8 @@ params_number:
     0x19: "Additional pre-authentication required"
     0x1A: "KDC does not know about the requested server"
     0x1B: "KDC is unavailable"
+    0x1C: "KDC Policy rejects transited path"
+    0x1D: "A service is not available"
     0x1F: "Integrity check on decrypted field failed"
     0x20: "The ticket has expired"
     0x21: "The ticket is not yet valid"
@@ -48,6 +50,7 @@ params_number:
     0x28: "Message type is unsupported"
     0x29: "Message stream modified and checksum didn't match	"
     0x2A: "Message out of order (possible tampering)"
+    0x2B: "Illegal cross realm ticket"
     0x2C: "Specified version of key is not available"
     0x2D: "Service key not available"
     0x2E: "Mutual authentication failed"
@@ -65,7 +68,15 @@ params_number:
     0x41: "A higher encryption level is needed"
     0x42: "User-to-user authorization is required"
     0x43: "No TGT was presented or available"
-    0x44: "Incorrect domain or principal"  # Kerberos end
+    0x44: "Incorrect domain or principal"
+    0x45: "KRB_AP_ERR_USER_TO_USER_REQUIRED"
+    0x46: "KDC_ERR_CANT_VERIFY_CERTIFICATE"
+    0x47: "KDC_ERR_INVALID_CERTIFICATE"
+    0x48: "KDC_ERR_REVOKED_CERTIFICATE"
+    0x49: "KDC_ERR_REVOCATION_STATUS_UNKNOWN"
+    0x4A: "KDC_ERR_REVOCATION_STATUS_UNAVAILABLE"
+    0x4B: "KDC_ERR_CLIENT_NAME_MISMATCH"
+    0x4C: "KDC_ERR_KDC_NAME_MISMATCH"  # Kerberos end
 
     0x30200: "The underlying file was converted to compound file format."
     0x30201: "The storage operation should block until more data is available."

diff --git a/maps/params/PreAuthType.yaml b/maps/params/PreAuthType.yaml
@@ -9,6 +9,7 @@ params_number:
     2: "PA-ENC-TIMESTAMP (This is a normal type for standard password authentication.)"
     11: "PA-ETYPE-INFO (The ETYPE-INFO pre-authentication type is sent by the KDC in a KRB-ERROR indicating a requirement for additional pre-authentication. It is usually used to notify a client of which key to use for the encryption of an encrypted timestamp for the purposes of sending a PA-ENC-TIMESTAMP pre-authentication value. Never saw this Pre-Authentication Type in Microsoft Active Directory environment.)"
     15: "PA-PK-AS-REP_OLD (Used for Smart Card logon authentication.)"
+    16: "PA-PK-AS-REQ (Request sent to KDC in Smart Card authentication scenarios.)"
     17: "PA-PK-AS-REP (This type should also be used for Smart Card authentication, but in certain Active Directory environments, it is never seen.)"
     19: "PA-ETYPE-INFO2 (The ETYPE-INFO2 pre-authentication type is sent by the KDC in a KRB-ERROR indicating a requirement for additional pre-authentication. It is usually used to notify a client of which key to use for the encryption of an encrypted timestamp for the purposes of sending a PA-ENC-TIMESTAMP pre-authentication value. Never saw this Pre-Authentication Type in Microsoft Active Directory environment.)"
     20: "PA-SVR-REFERRAL-INFO (Used in KDC Referrals tickets.)"