Saint Doller-ticket, Who Forgot the Dollar

Patron of Kerberos tickets, computer accounts missing their trailing dollar, and nearly identical usernames.

Life

In November 2021 Microsoft fixed a family of Active Directory flaws around the sAMAccountName: in Active Directory, computer accounts end with a dollar sign, but the key distribution centre, if it couldn't find a name, tried again with the dollar added. An account named like a domain controller, minus the dollar, could thus obtain tickets in the controller's name. In May 2022 New Zealand's Catalyst, among the developers of Samba, told the story under the name Doller-ticket.

Prayer

O Saint Doller-ticket, who poses as the controller for want of a dollar, let our names always be written in full. Amen.

How to celebrate

Celebrated by installing the November 2021 updates and checking who can rename accounts in the domain.

For want of a dollar, the domain was lost.