PagedSearchControl value length : 0x30 L1 | +--> 0x02 0x0(1-4) [0..2^63-1] (size) +--> 0x04 L2 (cookie)
PersistentSearchDecorator value length : 0x30 L1 | +--> 0x02 0x0(1-4) [0..2^31-1] (changeTypes) +--> 0x01 0x01 [0x00 | 0xFF] (changeOnly) +--> 0x01 0x01 [0x00 | 0xFF] (returnRCs)
0x30 L1 AD-AND-OR sequence | +--> 0xA1 L2 condition count tag | | | +--> 0x02 L2-1 condition count (int) | +--> 0xA2 L3 elements tag | +--> 0x30 L3-1 elements (AuthorizationData)
0x30 L1 AD-KDCIssued sequence | +--> 0xA1 L2 ad-checksum tag | | | +--> 0x30 L2-1 ad-checksum value ( Checksum ) | +--> 0xA2 L3 i-realm tag | | | +--> 0x1B L3-1 i-realm value ( KerberosString ) | +--> 0xA3 L4 i-sname tag | | | +--> 0x30 L4-1 i-sname value ( PrincipalName ) | +--> 0xA4 L5 elements tag | +--> 0x30 L5-1 elements (AuthorizationData)
0x30 L1 AuthorizationData sequence | +-- 0x30 L2 The AD sequence | +--> 0xA0 L3 adType tag | | | +--> 0x02 L3-1 adType (int) | +--> 0xA1 L4 adData tag | +--> 0x04 L<4-1 adData (OCTET STRING)
Checksum : 0x30 L1 checksum sequence | +--> 0xA0 L2 cksumtype tag | | | +--> 0x02 L2-1 cksumtype (int) | +--> 0xA1 L3 checksum tag | +--> 0x04 L3-1 checksum (OCTET STRING) where L1 = L2 + lenght(0xA0) + length(L2) + L3 + lenght(0xA1) + length(L3) and L2 = L2-1 + length(0x02) + length( L2-1) L3 = L3-1 + length(0x04) + length( L3-1)
ETypeInfo : 0x30 L1 ETypeInfo sequence of ETypeInfoEntry | +--> 0x30 L2[1] ETypeInfoEntry[1] | +--> 0x30 L2[2] ETypeInfoEntry[2] | ... | +--> 0x30 L2[n] ETypeInfoEntry[n] where L1 = sum( L2[1], l2[2], ..., L2[n] )
ETypeInfo2 : 0x30 L1 ETypeInfo2 sequence of ETypeInfo2Entry | +--> 0x30 L2[1] ETypeInfo2Entry[1] | +--> 0x30 L2[2] ETypeInfo2Entry[2] | ... | +--> 0x30 L2[n] ETypeInfo2Entry[n] where L1 = sum( L2[1], l2[2], ..., L2[n] )
ETYPE-INFO-ENTRY : 0x30 L1 ETYPE-INFO2-ENTRY sequence | +--> 0xA0 L2 etype tag | | | +--> 0x02 L2-1etype (int) | +--> 0xA1 L3 salt tag | | | +--> 0x1B L3-1 salt (KerberosString) | +--> 0xA2 L4 s2kparams tag | +--> 0x04 L4-1 salt (OCTET STRING) where L1 = L2 + length(0xA0) + length(L2) + L3 + length(0xA1) + length(L3) + L4 + length(0xA2) + length( L4) and L2 = L2-1 + length(0x02) + length( L2-1) L3 = L3-1 + length(0x1B) + length( L3-1) L4 = L4-1 + length(0x04) + length( L4-1)
ETYPE-INFO-ENTRY : 0x30 L1 ETYPE-INFO-ENTRY sequence | +--> 0xA0 L2 etype tag | | | +--> 0x02 L2-1etype (int) | +--> 0xA1 L3 salt tag | +--> 0x04 L3-1 salt (OCTET STRING) where L1 = L2 + lenght(0xA0) + length(L2) + L3 + lenght(0xA1) + length(L3) and L2 = L2-1 + length(0x02) + length( L2-1) L3 = L3-1 + length(0x04) + length( L3-1)
EncKdcRepPart : 0x30 L1 EncKdcRepPart sequence | +--> 0xA0 L2 key tag | | | +--> 0x30 L2-1 key ( EncryptionKey) | +--> 0xA1 L3 last-req tag | | | +--> 0x30 L3-1 last-req ( LastReq ) | +--> 0xA2 L4 nonce tag | | | +--> 0x02 L4-1 nonce (Int) | [+--> 0xA3 0x11 key-expiration tag] | | | +--> 0x18 0x0F key-expiration ( KerberosTime ) | +--> 0xA4 0x07 flags tag | | | +--> 0x03 0x05 flags ( TicketFlags ) | +--> 0xA5 0x11 authtime tag | | | +--> 0x18 0x0F authtime ( KerberosTime ) | [+--> 0xA6 0x11 starttime tag] | | | +--> 0x18 0x0F starttime ( KerberosTime ) | +--> 0xA7 0x11 endtime tag | | | +--> 0x18 0x0F endtime ( KerberosTime ) | [+--> 0xA8 0x11 renew-till tag] | | | +--> 0x18 0x0F renew-till ( KerberosTime ) | +--> 0xA9 L5 srealm tag | | | +--> 0x1B L5-1 srealm ( KerberosString ) | +--> 0xAA L6 sname tag | | | +--> 0x30 L6-1 sname ( PrincipalName ) | [+--> 0xAB L7 caddr tag] | +--> 0x30 L7-1 caddr ( HostAddresses )
0x7D L1 | +--> 0x30 L1-2 EncKrbCredPart seq tag | +--> 0xA0 L2 seq of KrbCredInfo tag | | | +--> 0x30 L2-2 seq tag | | | +--> 0x30 LL1 KrbCredInfo | . .... | +--> 0x30 LLn KrbCredInfo | +--> 0xA1 L3 nonce tag | | | +--> 0x02 L3-2 nonce (UInt32) | +--> 0xA2 11 timestamp tag | | | +--> 0x18 0x0F timestamp (KerberosTime) | +--> 0xA3 L4 usec tag | | | +--> 0x02 L4-2 usec (Microseconds) | +--> 0xA4 L5 s-address tag | | | +--> 0x30 L5-2 s-address (HostAddress) | +--> 0xA5 L6 r-address tag | +--> 0x30 L6-2 s-address (HostAddress)
0x7C L0 EncKrbPrivPart | | 0x30 L1 EncKrbPrivPart SEQ | +--> 0xA0 L2 user-data tag | | | +--> 0x04 L2-1 user-data (Octet String) | +--> 0xA1 0x11 timestamp tag | | | +--> 0x18 0x0F timestamp (KerberosTime) | +--> 0xA2 L3 usec tag | | | +--> 0x02 L3-1 usec (Microseconds) | +--> 0xA3 L4 seq-number tag | | | +--> 0x02 L4-1 seqnumber (UInt32) | +--> 0xA4 L5 s-address tag | | | +--> 0x30 L5-1 s-address (HostAddress) | +--> 0xA5 L6 r-address tag | +--> 0x30 L6-1 r-address (HostAddress)
EncryptedData : 0x30 L1 EncryptedData sequence | +--> 0xA1 L2 etype tag | | | +--> 0x02 L2-1 etype (int) | +--> [0xA2 L3 kvno tag | | | +--> 0x30 L3-1 kvno (int)] (optional) | +--> 0xA2 L4 cipher tag | +--> 0x04 L4-1 cipher (OCTET STRING)
EncryptionKey : 0x30 L1 EncryptionKey | +--> 0xA0 L2 keyType tag | | | +--> 0x02 L2-1 keyType (int) | +--> 0xA1 L3 keyValue tag | +--> 0x04 L3-1 keyValue (OCTET STRING) where L1 = L2 + lenght(0xA0) + length(L2) + L3 + lenght(0xA1) + length(L3) and L2 = L2-1 + length(0x02) + length( L2-1) L3 = L3-1 + length(0x04) + length( L3-1)
HostAddress : 0x30 L1 hostAddress sequence | +--> 0xA0 L2 addrType tag | | | +--> 0x02 L2-1 addrType (int) | +--> 0xA1 L3 address tag | +--> 0x04 L3-1 address (OCTET STRING) where L1 = L2 + length(0xA0) + length(L2) + L3 + length(0xA1) + length(L3) and L2 = L2-1 + length(0x02) + length( L2-1) L3 = L3-1 + length(0x04) + length( L3-1)
HostAddresses : 0x30 L1 hostAddresses sequence of HostAddresses | +--> 0x30 L2[1] Hostaddress[1] | +--> 0x30 L2[2] Hostaddress[2] | ... | +--> 0x30 L2[n] Hostaddress[n] where L1 = sum( L2[1], l2[2], ..., L2[n] )
KDC-REP : 0x30 L1 KDC-REP sequence | +--> 0xA0 0x03 pvno tag | | | +--> 0x02 0x01 0x05 pvno (5) | +--> 0xA1 0x03 msg-type tag | | | +--> 0x02 0x01 0x0B/0x0D msg-type : either AS-REP (0x0B) or TGS-REP (0x0D) | +--> 0xA2 L2 pa-data tag | | | +--> 0x30 L2-1 pa-data SEQ | | | +--> 0x30 L2-1-1 pa-data | | | +--> 0x30 L2-1-2 pa-data | : | +--> 0xA3 L3 crealm tag | | | +--> 0x1B L3-1 crealm | +--> 0xA4 L4 cname tag | | | +--> 0x30 L4-1 cname | +--> 0xA5 L5 ticket tag | | | +--> 0x61 L5-1 ticket | +--> 0xA6 L6 enc-part tag | +--> 0x30 L6-1 enc-part
KDC-REQ : 0x30 L1 KDC-REQ sequence | +--> 0xA1 0x03 pvno tag | | | +--> 0x02 0x01 0x05 pvno (5) | +--> 0xA2 0x03 msg-type tag | | | +--> 0x02 0x01 0x0A/0x0C msg-type : either AS-REQ (0x0A) or TGS-REQ (0x0C) | +--> 0xA3 L2 pa-data tag | | | +--> 0x30 L2-1 pa-data SEQ | | | +--> 0x30 L2-1-1 pa-data | | | +--> 0x30 L2-1-2 pa-data | : | +--> 0xA4 L3 req-body tag | | | +--> 0x30 L3-1 req-body (KDC-REQ-BODY)
KdcReqBody : 0x30 L1 KdcReqBody sequence | +--> 0xA0 L2 kdc-options tag | | | +--> 0x03 L2-1 kdc-options (BitString) | +--> 0xA1 L3 cname tag | | | +--> 0x30 L3-1 cname (PrincipalName) | +--> 0xA2 L4 realm tag | | | +--> 0x1B L4-1 realm (Realm, KerberosString) | +--> 0xA3 L5 sname tag | | | +--> 0x30 L5-1 sname (PrincipalName) | +--> 0xA4 L6 from tag | | | +--> 0x18 L6-1 from (KerberosTime) | +--> 0xA5 L7 till tag | | | +--> 0x18 L7-1 till (KerberosTime) | +--> 0xA6 L8 rtime tag | | | +--> 0x18 L8-1 rtime (KerberosTime) | +--> 0xA7 L9 nonce tag | | | +--> 0x02 L9-1 nonce (Int) | +--> 0xA8 L10 etype tag | | | +--> 0x30 L10-1 SEQ | | | +--> 0x02 L10-1-1 etype | | | +--> 0x02 L10-1-2 etype | | | : | +--> 0xA9 L11 addresses tag | | | +--> 0x30 L11-1 addresses (HostAddresses) | +--> 0xAA L12 enc-authorization-data tag | | | +--> 0x30 L12-1 enc-authorization-data | +--> 0xAB L13 additional-tickets tag | +--> 0x30 L13-1 additional-tickets | +--> 0x61 L13-1-1 Ticket | +--> 0x61 L13-1-2 Ticket | :
0x30 L1 KrbCredInfo SEQ tag | | +--> 0xA0 L2 key tag | | | +--> 0x30 L2-2 key | +--> [0xA1 L3 prealm tag | | | +--> 0x1B L3-2 prealm] | +--> [0xA2 L4 pname tag | | | +--> 0x30 L4-2 pname] | +--> [0xA3 L5 flags tag | | | +--> 0x02 L5-2 flags] | +--> [0xA4 0x11 authtime tag | | | +--> 0x18 0x1F authtime] | +--> [0xA5 0x11 starttime tag | | | +--> 0x18 0x1F starttime] | +--> [0xA6 0x11 endtime tag | | | +--> 0x18 0x1F endtime] | +--> [0xA7 0x11 renew-till tag | | | +--> 0x18 0x1F renew-till] | +--> [0xA8 L6 srealm tag | | | +--> 0x1B L6-2 srealm] | +--> [0xA9 L7 sname tag | | | +--> 0x30 L7-2 sname] | +--> [0xAA L8 caddr tag | +--> 0x30 L8-2 caddr
0x30 L1 KRB-SAFE-BODY SEQ | +--> 0xA0 L2 user-data tag | | | +--> 0x04 L2-1 user-data (Octet String) | +--> 0xA1 0x11 timestamp tag | | | +--> 0x18 0x0F timestamp (KerberosTime) | +--> 0xA2 L3 usec tag | | | +--> 0x02 L3-1 usec (Microseconds) | +--> 0xA3 L4 seq-number tag | | | +--> 0x02 L4-1 seqnumber (UInt32) | +--> 0xA4 L5 s-address tag | | | +--> 0x30 L5-1 s-address (HostAddress) | +--> 0xA5 L6 r-address tag | +--> 0x30 L6-1 r-address (HostAddress)
LastReq : 0x30 L1 LastReq | +--> 0x30 L2 | +--> 0xA0 L3 lr-type tag | | | +--> 0x02 L3-1 lrType (int) | +--> 0xA1 0x11 lr-value tag | +--> 0x18 0x0F ttt (KerberosString)
METHOD-DATA : 0x30 L1 METHOD-DATA sequence of PA-DATA | +--> 0x30 L2[1] PA-DATA[1] | +--> 0x30 L2[2] PA-DATA[2] | ... | +--> 0x30 L2[n] PA-DATA[n] where L1 = sum( L2[1], l2[2], ..., L2[n] )
PreAuthenticationData : 0x30 L1 PreAuthenticationData sequence | +--> 0xA0 L2 padata-type tag | | | +--> 0x02 L2-1 padata-type (int) | +--> 0xA1 L3 padata-value tag | +--> 0x04 L3-1 padata-value (OCTET STRING) where L1 = L2 + lenght(0xA0) + length(L2) + L3 + lenght(0xA1) + length(L3) and L2 = L2-1 + length(0x02) + length( L2-1) L3 = L3-1 + length(0x04) + length( L3-1)
PA-ENC-TS-ENC : 0x30 L1 PA-ENC-TS-ENC sequence | +--> 0xA0 0x11 patimestamp tag | | | +--> 0x18 0x0F patimestamp value (KerberosTime) | +--> 0xA1 L2 pausec tag | +--> 0x02 L2-1 pausec (INTEGER)
PrincipalName : 0x30 L1 PrincipalName sequence | +--> 0xA1 L2 name-type tag | | | +--> 0x02 L2-1 addressType (int) | +--> 0xA2 L3 name-string tag | +--> 0x30 L3-1 name-string (SEQUENCE OF KerberosString) | +--> 0x1B L4[1] value (KerberosString) | +--> 0x1B L4[2] value (KerberosString) | ... | +--> 0x1B L4[n] value (KerberosString)
TransitedEncoding : 0x30 L1 TransitedEncoding | +--> 0xA0 L2 trType tag | | | +--> 0x02 L2-1 trType (int) | +--> 0xA1 L3 contents tag | +--> 0x04 L3-1 contents (OCTET STRING) where L1 = L2 + lenght(0xA0) + length(L2) + L3 + lenght(0xA1) + length(L3) and L2 = L2-1 + length(0x02) + length( L2-1) L3 = L3-1 + length(0x04) + length( L3-1)
0x30 L1 TypedData sequence | +-- 0x30 L2 The TD sequence | +--> 0xA0 L3 tdType tag | | | +--> 0x02 L3-2 tdType (int) | +--> [0xA1 L4 tdData tag | +--> 0x04 L4-2 tdData (OCTET STRING)]
AP-REP : 0x6F L1 AP-REP message | +--> 0x30 L2 | +--> 0xA0 0x03 | | | +--> 0x02 0x01 0x05 pvno | +--> 0xA1 0x03 | | | +--> 0x02 0x01 0x0E msg-type | +--> 0xA2 L3 | +--> 0x30 L3-1 enc-part
AP-REQ : 0x6E L1 AP-REQ [APPLICATION 14] | +--> 0x30 L2 | +--> 0xA0 0x03 pvno tag | | | +--> 0x02 0x01 0x05 pvno (5) | +--> 0xA1 0x03 msg-type tag | | | +--> 0x02 0x01 0x0E msg-type (14) | +--> 0xA2 0x03 APOptions tag | | | +--> 0x03 0x05 0x00 b1 b2 b3 b4 APOtions | +--> 0xA3 L3 ticket tag | | | +--> 0x61 L3-1 ticket | +--> 0xA4 L4 authenticator tag | +--> 0x30 L4-1 authenticator (encrypted)
AS-REP : 0x6B L1 AS-REP message | +--> 0x30 L2 KDC-REP sequence
AS-REQ : 0x6A L1 AS-REQ message | +--> 0x30 L2 KDC-REQ sequence
Authenticator : 0x62 L1 Authenticator [APPLICATION 2] | +--> 0x30 L2 Authenticator SEQUENCE | +--> 0xA0 03 authenticator-vno tag | | | +--> 0x02 0x01 0x05 authenticator-vno (int, 5) | +--> 0xA1 L3 crealm tag | | | +--> 0x1B L3-1 crealm (KerberosString) | +--> 0xA2 L4 cname (PrincipalName) | +--> 0xA3 L5 cksum (CheckSum) | +--> 0xA4 L6 cusec tag | | | +--> 0x02 L6-1 nnn cusec value (Integer) | +--> 0xA5 0x11 ctime tag | | | +--> 0x18 0x0F ttt ctime (KerberosTime) | +--> 0xA6 L7 subkey (EncryptionKey) | +--> 0xA7 L8 seq-number tag | | | +--> 0x02 L8-1 nnn seq-number (Integer) | +--> 0xA8 L9 authorization-data (AuthorizationData)
Authenticator : 0x7B L1 EncApRepPart [APPLICATION 27] | +--> 0x30 L2 SEQ | +--> 0xA0 11 ctime tag | | | +--> 0x18 0x0F ttt ctime (KerberosTime) | +--> 0xA1 L3 cusec tag | | | +--> 0x02 L3-1 cusec (INTEGER) | +--> 0xA2 L4 subkey (EncryptionKey) | +--> 0xA3 L5 seq-number tag | +--> 0x02 L5-1 NN seq-number (INTEGER)
EncAsRepPart : 0x79 L1 EncAsRepPart message | +--> 0x30 L2 EncKdcRepPart sequence
EncTgsRepPart : 0x7A L1 EncTgsRepPart message | +--> 0x30 L2 EncKdcRepPart sequence
KRB-CRED : 0x76 L1 KRB-CRED APPLICATION[22] | +--> 0x30 L2 KRB-CRED sequence | +--> 0xA0 0x03 pvno tag | | | +--> 0x02 0x01 0x05 pvno (5) | +--> 0xA1 0x03 msg-type tag | | | +--> 0x02 0x01 0x16 msg-type (22) | +--> 0xA2 L3 tickets tag | | | +--> 0x30 LL tickets seq tag | | | +--> 0x30 LL1 ticket (Ticket) | . ... | +--> 0x30 LLn ticket (Ticket) | +--> 0xA3 L4 enc-part tag | +--> 0x30 L4-2 enc-part (EncryptedData)
KRB-ERROR : 0x7E L1 KRB-ERROR APPLICATION[30] | +--> 0x30 L2 KRB-ERROR sequence | +--> 0xA0 0x03 pvno tag | | | +--> 0x02 0x01 0x05 pvno (5) | +--> 0xA1 0x03 msg-type tag | | | +--> 0x02 0x01 0x1E msg-type (30) | +--> 0xA2 0x11 ctime tag | | | +--> 0x18 0x0F ttt ctime (KerberosTime) | +--> 0xA3 L3 cusec tag | | | +--> 0x02 L3-1 cusec | +--> 0xA4 0x11 stime tag | | | +--> 0x18 0x0F ttt stime (KerberosTime) | +--> 0xA5 L4 susec tag | | | +--> 0x02 L4-1 susec (KerberosTime) | +--> 0xA6 L5 error-code tag | | | +--> 0x02 L5-1 nnn error-code | +--> 0xA7 L6 crealm tag | | | +--> 0x1B L6-1 crealm (KerberosString) | +--> 0xA8 L7 cname tag | | | +--> 0x30 L7-1 cname (PrincipalName) | +--> 0xA9 L8 realm tag | | | +--> 0x1B L8-1 realm (KerberosString) | +--> 0xAA L9 sname tag | | | +--> 0x30 L9-1 sname (PrincipalName) | +--> 0xAB L10 e-text tag | | | +--> 0x1B L10-1 e-text (KerberosString) | +--> 0xAC L11 e-data | +--> 0x04 L11-1 e-data (Octet String)
KRB-PRIV : 0x75 L1 KRB-PRIV APPLICATION[21] | +--> 0x30 L2 KRB-PRIV sequence | +--> 0xA0 0x03 pvno tag | | | +--> 0x02 0x01 0x05 pvno (5) | +--> 0xA1 0x03 msg-type tag | | | +--> 0x02 0x01 0x15 msg-type (21) | +--> 0xA3 L3 enc-part (EncryptedData -- EncKrbPrivPart)
KRB-SAFE : 0x74 L1 KRB-SAFE APPLICATION[20] | +--> 0x30 L2 KRB-ERROR sequence | +--> 0xA0 0x03 pvno tag | | | +--> 0x02 0x01 0x05 pvno (5) | +--> 0xA1 0x03 msg-type tag | | | +--> 0x02 0x01 0x14 msg-type (20) | +--> 0xA2 L3 safe-body tag | | | +--> 0x30 L3-1 safe-body (KRB-SAFE-BODY) | +--> 0xA3 L4 cksum tag | +--> 0x30 L4-1 cksum (CHECKSUM)
TGS-REP : 0x6D L1 TGS-REP message | +--> 0x30 L2 KDC-REP sequence
TGS-REQ : 0x6A L1 TGS-REQ message | +--> 0x30 L2 KDC-REQ sequence
PagedSearchControl value length : 0x30 L1 | +--> 0x02 0x0(1-4) [0..2^63-1] (size) +--> 0x04 L2 (cookie)
PersistentSearchDecorator value length : 0x30 L1 | +--> 0x02 0x0(1-4) [0..2^31-1] (changeTypes) +--> 0x01 0x01 [0x00 | 0xFF] (changeOnly) +--> 0x01 0x01 [0x00 | 0xFF] (returnRCs)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|