<div class="content" name="KERB_STORED_CREDENTIAL_NEW" uuid="08cb3ca7-954b-45e3-902e-77512fe3ba8e"><p>The KERB_STORED_CREDENTIAL_NEW structure is a
variable-length structure that defines the format of the
Primary:Kerberos-Newer-Keys property within the <b>supplementalCredentials</b>
attribute. For information on how this structure is created, see section <span><a href="f3fd5c77-7a63-43dc-ac8d-598ca374a5a3" data-linktype="relative-path">3.1.1.8.11.6</a></span>.</p><p>This structure is stored as a property value in a <span><a href="7c0f2eca-1783-450b-b5a0-754cf11f22c9" data-linktype="relative-path">USER_PROPERTY</a></span>
structure.</p><table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td colspan="16">Revision</td>
  <td colspan="16">Flags</td>
 </tr>
 <tr>
  <td colspan="16">CredentialCount</td>
  <td colspan="16">ServiceCredentialCount</td>
 </tr>
 <tr>
  <td colspan="16">OldCredentialCount</td>
  <td colspan="16">OlderCredentialCount</td>
 </tr>
 <tr>
  <td colspan="16">DefaultSaltLength</td>
  <td colspan="16">DefaultSaltMaximumLength</td>
 </tr>
 <tr>
  <td colspan="32">DefaultSaltOffset</td>
 </tr>
 <tr>
  <td colspan="32">DefaultIterationCount</td>
 </tr>
 <tr>
  <td colspan="32">Credentials (variable)</td>
 </tr>
 <tr>
  <td colspan="32">...</td>
 </tr>
 <tr>
  <td colspan="32">ServiceCredentials (variable)</td>
 </tr>
 <tr>
  <td colspan="32">...</td>
 </tr>
 <tr>
  <td colspan="32">OldCredentials (variable)</td>
 </tr>
 <tr>
  <td colspan="32">...</td>
 </tr>
 <tr>
  <td colspan="32">OlderCredentials (variable)</td>
 </tr>
 <tr>
  <td colspan="32">...</td>
 </tr>
 <tr>
  <td colspan="32">DefaultSalt (variable)</td>
 </tr>
 <tr>
  <td colspan="32">...</td>
 </tr>
 <tr>
  <td colspan="32">KeyValues (variable)</td>
 </tr>
 <tr>
  <td colspan="32">...</td>
 </tr>
</tbody></table><p><b>Revision (2 bytes): </b>This value MUST be set to
4.</p><p><b>Flags (2 bytes): </b>This value MUST be zero and
ignored on read.</p><p><b>CredentialCount (2 bytes): </b>This is the count
of elements in the <b>Credentials</b> field.</p><p><b>ServiceCredentialCount (2 bytes): </b>This is the
count of elements in the <b>ServiceCredentials</b> field. </p><p><b>OldCredentialCount (2 bytes): </b>This is the
count of elements in the <b>OldCredentials</b> field that contain the keys for
the previous password.</p><p><b>OlderCredentialCount (2 bytes): </b> This is the
count of elements in the <b>OlderCredentials</b> field that contain the keys
for the previous password.</p><p><b>DefaultSaltLength (2 bytes): </b>The length, in
bytes, of a <span><a href="7b2aeb27-92fc-41f6-8437-deb65d950921#gt_1672c769-f184-404a-9575-e637fd3a43ed" data-linktype="relative-path">salt</a></span> value.</p><dl>
<dd>
<p>This value is in little-endian byte order. This
value SHOULD be ignored on read.</p>
</dd></dl><p><b>DefaultSaltMaximumLength (2 bytes): </b>The
length, in bytes, of the buffer containing the salt value.</p><dl>
<dd>
<p>This value is in little-endian byte order. This
value SHOULD be ignored on read.</p>
</dd></dl><p><b>DefaultSaltOffset (4 bytes): </b>An offset, in
little-endian byte order, from the beginning of the attribute value (that is,
from the beginning of the <b>Revision</b> field of <span><a href="866f0180-8694-4e14-be7e-dfd91d91694f" data-linktype="relative-path">KERB_STORED_CREDENTIAL</a></span>)
to where <b>DefaultSalt</b> starts. This value SHOULD be ignored on read.</p><p><b>DefaultIterationCount (4 bytes): </b>The default
iteration count used to calculate the password hashes.</p><p><b>Credentials (variable): </b>An array of <b>CredentialCount</b>
<span><a href="447520a5-e1cc-48cc-8fdc-b90db57f7eac" data-linktype="relative-path">KERB_KEY_DATA_NEW
(section 2.2.10.7)</a></span> elements.</p><p><b>ServiceCredentials (variable): </b>(This field is
optional.) An array of <b>ServiceCredentialCount</b> KERB_KEY_DATA_NEW
elements.</p><p><b>OldCredentials (variable): </b>(This field is
optional.) An array of <b>OldCredentialCount</b> KERB_KEY_DATA_NEW elements.</p><p><b>OlderCredentials (variable): </b>(This field is
optional.) An array of <b>OlderCredentialCount</b> KERB_KEY_DATA_NEW elements.</p><p><b>DefaultSalt (variable): </b>The default salt
value.</p><p><b>KeyValues (variable): </b>An array of <b>CredentialCount</b>
+ <b>ServiceCredentialCount</b> + <b>OldCredentialCount</b> + <b>OlderCredentialCount</b>
key values. Each key value MUST be located at the offset specified by the
corresponding <b>KeyOffset</b> values specified in <b>Credentials</b>, <b>ServiceCredentials</b>,
<b>OldCredentials</b>, and <b>OlderCredentials</b>.</p></div>