Method as_req

scapy/layers/kerberos.py:3444–3644

(self)

        )

    def as_req(self):
        now_time = datetime.now(timezone.utc).replace(microsecond=0)

        # 1. Build and populate KDC-REQ
        kdc_req = self._base_kdc_req(now_time=now_time)
        kdc_req.addresses = [
            HostAddress(
                addrType=ASN1_INTEGER(20),  # Netbios
                address=ASN1_STRING(self.host.ljust(16, " ")),
            )
        ]
        kdc_req.cname = PrincipalName.fromUPN(self.upn)
        kdc_req.sname = PrincipalName.fromSPN(self.spn)

        # 2. Build the list of PADATA
        padata = [
            PADATA(
                padataType=ASN1_INTEGER(128),  # PA-PAC-REQUEST
                padataValue=PA_PAC_REQUEST(includePac=ASN1_BOOLEAN(-1)),
            )
        ]

        # Cookie support
        if self.fxcookie:
            padata.insert(
                0,
                PADATA(
                    padataType=133,  # PA-FX-COOKIE
                    padataValue=self.fxcookie,
                ),
            )

        # FAST
        if self.fast:
            # Calculate the armor key
            self.calc_fast_armorkey()

            # [MS-KILE] sect 3.2.5.5
            # "When sending the AS-REQ, add a PA-PAC-OPTIONS [167]"
            padata.append(
                PADATA(
                    padataType=ASN1_INTEGER(167),  # PA-PAC-OPTIONS
                    padataValue=PA_PAC_OPTIONS(
                        options="Claims",
                    ),
                )
            )

        # Pre-auth is requested
        if self.pre_auth:
            if self.x509:
                # Special PKINIT (RFC4556) factor

                # RFC4556 - 3.2.1. Generation of Client Request

                # RFC4556 - 3.2.1 - (5) AuthPack
                authpack = KRB_AuthPack(
                    pkAuthenticator=KRB_PKAuthenticator(