Kerberos

THEORY

Theory | Bibliothèquevenator17.gitbook.io

CLOCK ERROR

[-] Got error while trying to request TGT: Kerberos SessionError: KRB_AP_ERR_SKEW(Clock skew too great)

It's very common (at least in HTB Boxes) error because of time zone difference timestamp header in authentication packets is getting to big. So the fix is time sync with server

Stop default automatic time sync

sudo systemctl stop systemd-timesyncd

Sync time with server

sudo ntpdate 13.13.13.13

Change time back

timedatectl set-ntp 1

OTHER ERROR (CONFIGURATION FIX)

I mainly noticed it when having authentication issues or some tooling requires it to properly interact with the machine.

netexec smb 13.13.13.13 -u 'songbird' -p 'p@ssw0rd' --generate-krb5-file ./krb5.conf