Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot locate Krb5Login module #5

Open
usus1 opened this issue May 7, 2019 · 11 comments
Open

Cannot locate Krb5Login module #5

usus1 opened this issue May 7, 2019 · 11 comments

Comments

@usus1
Copy link

usus1 commented May 7, 2019

While trying to test domain settings I get this type of error.

Connected to port 88, but failed to contact Kerberos service: No LoginModule found for com.sun.security.auth.module.Krb5LoginModule

This seems to work few moths ago.

My env:

OS:
Linux kali-i3 4.19.0-kali4-amd64 #1 SMP Debian 4.19.28-2kali1 (2019-03-18) x86_64 GNU/Linux

Java:
openjdk version "11.0.3" 2019-04-16
OpenJDK Runtime Environment (build 11.0.3+1-Debian-1)
OpenJDK 64-Bit Server VM (build 11.0.3+1-Debian-1, mixed mode, sharing)

Burp:
2.0.20beta Pro

Thanks in advance

@va-14
Copy link

va-14 commented Jul 5, 2019

I've the same issue:
Connected to port 88, but failed to contact Kerberos service: No LoginModule found for com.sun.security.auth.module.Krb5LoginModule

Failed to acquire TGT: No LoginModule found for com.sun.security.auth.module.Krb5LoginModule

@va-14
Copy link

va-14 commented Jul 8, 2019

I tried older versions, different java versions, different OS.
But I sort of found a way to get the plugin working.
When I use the symlink on Mac/Kali/Win It cannot resolve.
When I start the program with java -jar burpsuite_pro_v2.1.jar it works on the three platforms.

@rtt-ncc
Copy link
Collaborator

rtt-ncc commented Jul 8, 2019

Thanks both of you for reporting this, sorry for taking some time to pick it up.
Just so that I can try to reproduce - did the problem occur on Windows as well as on Kali?

@va-14
Copy link

va-14 commented Jul 8, 2019 via email

@rtt-ncc
Copy link
Collaborator

rtt-ncc commented Jul 8, 2019

Seems that Burp v2 is now using OpenJDK instead of the Oracle JDK, and the version of OpenJDK being shipped doesn't include the jdk.security.auth module, which contains the Kerberos classes required by Berserko.

I'll speak to the PortSwigger guys to see if it's possible to have this included.

Until then, as you say, the only way to get it work will be running Burp on top of a different JRE/JDK :-(

@usus1
Copy link
Author

usus1 commented Jul 8, 2019

Thanks Richard

@Champion0081
Copy link

I can confirm the same here on windows java 1.8.0.

@rtt-ncc do we have any news on this?

@rtt-ncc
Copy link
Collaborator

rtt-ncc commented Jul 29, 2019

@mattimac do you mean you encountered the same error when using a JDK other than that shipped with Burp?
If so can you provide the output of java -version?

If you didn't mean that, see the note at the top of README.md in this repo.

Either way, Portswigger have said that this should be fixed in v2.1.03 of Burp (not released yet).

@Champion0081
Copy link

I am not sure what is shipped with the current version but mine is

java version "1.8.0_201"
Java(TM) SE Runtime Environment (build 1.8.0_201-b09)

I think it may be worth mentioning in the readme that the fix will probably come with that version. I understand that for now there is no timeframe estimated for this. Thanks so much for fast response Richard.

@rtt-ncc
Copy link
Collaborator

rtt-ncc commented Aug 12, 2019

See update to README file - this problem was fixed by PortSwigger in v2.1.03 of Burp. I have verified and it seems to be fine. If I don't hear of any more problems I'll close this issue soon.

@Champion0081
Copy link

Fixed for me too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants