0
votes
1answer
120 views

Kerberos authentication of Windows clients and Redhat 5.5 with Samba PDC?

I already realize that configure Redhat 5.5 as PDC (Primary Domain Controller), and the clients (Windows XP and Windows 2003) can join the realm. The realm name of Linux server is EXAMPLE.COM. ...
1
vote
0answers
164 views

Problems with kvno + Consultation with kerberos authentication settings

I have clearly identified a problem that I can not solve. I suspect I'm missing something when setting the service running on Centos 6 on Windows Server 2003. First I tell the environment that I'm ...
0
votes
2answers
512 views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
1
vote
1answer
455 views

Cannot access shares via \\servername but \\ip works

To set up the scenario: One of our techs set one of the domain controllers to use Microsoft time. The time IS correct (including Time Zone) and DOES match the other domain controller's time; it was ...
3
votes
1answer
702 views

Kerberos Logging with Server 2008 R2 and Server 2003 SP2

Good morning everyone. I've been working with a Microsoft support technician for the last several days on a problem that appears related to delegation and/or Kerberos. The domain is running in a ...
2
votes
2answers
528 views

Kerberos constrained delegation to domain controllers

Setup: Forest Functional Level: Windows 2003 All DCs - Windows 2003 64 bit SP2 Requirements: Citrix server wants to use Kerberos delegation for SSO purpose. They want to create Kerberos constrained ...
0
votes
1answer
131 views

Sorting out delegation

I'm trying to sort out Windows Auth delegation for an IIS box talking to a SQL box, which should be passing through the users credentials. I've detailed the configuration of this double-hop scenario ...
0
votes
1answer
113 views

kerberos security question

I don't know what the best practice for kerberos is with regards to security. I was wondering is it a good idea to allow a kerberos server to be public so public servers can use single-sign on or is ...
0
votes
2answers
342 views

Automate setup of constrained kerberos delegation in AD

I have a web app that uses some backend servers (UNC, HTTP and SQL). To get this working I need to configure ServicePrincipalNames for the account running the IIS AppPool and then allow kerberos ...
0
votes
2answers
864 views

Event ID 4 Kerberos

Help! I screwed up big time. While trying to obtain the kerberos keys so i could decode some kerberos packets with wireshark, I inadvertently changed some internal passwords and I have no idea how ...
3
votes
1answer
720 views

Oracle with Kerberos authentication and Windows 2003 Server as KDC

I am running Oracle 10.2 on a Windows 2003 Server SP2 which is also the domain controller on the network. I wish to switch authentication method from NTS to Kerberos. I have spent a lot of time ...
1
vote
1answer
684 views

Kerberos and IIS6: Working with only specific users

I am setting up Kerberos and I have some strange issues. I am testing it with two users one who has a valid SPN and are trusted for delegation (user1) and one who does not have a valid SPN and is not ...
3
votes
1answer
914 views

Can I share one SPN between two service accounts?

I am running IIS and SQL Reporting Server on the same server. IIS runs as d\acct1 and SSRS is running as d\acct2. Initially, I registered an SPN HTTP/server.d.com for both d\acct1 and d\acct2 and ...
3
votes
1answer
676 views

IIS Kerberos authentication

On windows 2003 using IIS 6, we are trying to set up Kerberos authentication. This is working to some extent. I have setup a separate application pool with a service account. When ever I use this ...
2
votes
2answers
399 views

Linux in AD: Supported enctypes for Windows 2003 AD

In the MIT Kerberos implementation that comes with most Linux distributions, I can define what encryption type I want to use for ticket requests. I am not a Windows guy, but apparently, Kerberos as a ...