The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
18 views

Create kerberos keytab from AD file with more than one SPN

I need to create a Kerberos keytab file from Active Directory with three different SPNs. It's no problem to add different SPNs with setspn -a but when I try to create a keytab file with ktpass ...
0
votes
1answer
37 views

setting kerberos ktpass ktab all that JAAS

I have a couple of questions on Kerberos on Windows. I want to find out what the purpose of mapping a user to a service using ktpass is. For example I am on windows and I run ktpass like this: ...
0
votes
0answers
299 views

generate kytab file using msktutil. Error: Unable to set machine password (5) Access denied

I have problem when tryging to generate a kytab file using msktutil. When I generate this file it fails with following errors Error: Unable to set machine password for svc_testmyapps: (5) Access ...
0
votes
0answers
19 views

Force use of kerberos keytab file?

I understand the importance of the keytab file in kerberos and was wondering if there is a way to force use of a keytab? So if the keytab does not exist on the host then it will not authenticate ...
0
votes
0answers
170 views

Kerberos gss_acquire_cred() failed: An invalid name was supplied error

I'm trying to set up a single sign on system using LDAP, Kerberos and Drupal on a Ubuntu server. I have done some configuring for them all 3 and the last peace of problem remains this error in Apache ...
0
votes
1answer
424 views

kerberos cifs multiuser mount from AD PDC

I'm trying to mount a cifs folder on a ubuntu server with multiuser support from a windows DC. I can get user kerberos tickets as root on the server and mount the directory with kerberos without any ...
1
vote
1answer
328 views

What is the kerberos keytab file used for in UNIX/AD kerberos authentication?

I have proved that UNIX/AD Kerberos authentication works without the presence of a keytab file so I'd like to know whether I should worry about it (given I'll need an individual keytab for each server ...
0
votes
2answers
70 views

can't login after generating keytab file

I generated a keytab file with the following command: ktpass /out http-web.keytab /mapuser Administrator@my.domain.bar /princ HTTP/localhost:8080@my.domain.bar /pass * However, now I can't seem to ...
-1
votes
2answers
47 views

How to find out domain name for Win 2k8 server

I'm following this blog post: http://blog.springsource.com/2009/09/28/spring-security-kerberos/ It says: For this to work, every web applications needs to be registered at the Kerberos server ...
0
votes
1answer
132 views

F5 authentication using kerberos keytab

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
2
votes
3answers
3k views

error reading keytab file krb5.keytab

I've noticed these kerberos keytab error messages on both SLES 11.2 and CentOS 6.3: sshd[31442]: pam_krb5[31442]: error reading keytab 'FILE: / etc/ krb5. keytab' /etc/krb5.keytab does not exist on ...
0
votes
1answer
294 views

Why does ktutil list show some clients, but kinit says client unknown?

When I run ktutil list, I get a list of several clients. However, when I run kinit for any of the listed clients, I always get client unknown. Any ideas?
1
vote
0answers
208 views

Creating keytab for computer account to decrypt packet capture

We are having an issue with our blackberry server (EWSTest fails at autodiscover lookup) and I am running a packet capture with Wireshark in an attempt to diagnose the issue. There is a conversation ...
5
votes
2answers
4k views

ActiveDirectory Kerberos keytab unusable from Linux

I am configuring Kerberos authentication for Alfresco CIFS protocol fully implemented in Java (JLAN project). That is not the first time, I used to set it up right in a single shot. In the same ...
0
votes
1answer
105 views

Sudden catastrophic failure of kerberos

I've been playing with my openAFS setup, and adding keys for the afs principle for kerberos. Now, suddenly, Kerberos has gone down (or something). Kadmin gives the following error: kadmin -p admin ...
2
votes
2answers
4k views

help using setspn and ktpass

I'm trying to set up the SPNs and create a keytab file for tomcat kerberos spnego Single sign on. the server running tomcat7 is ubuntu-ad1.wad.eng.hytrst.com the KDC is kerberos.wad.eng.hytrust.com ...
3
votes
2answers
145 views

Why do kerberos HOWTOs specify to copy keytabs securely to the host? Is networked kadmin not secure?

Kerberos HOWTOs often have words similar to these: Securely transfer (via flash drive, disk, or encrypted connection) the keytab to the client host. Is logging in on the client host as root, ...
0
votes
1answer
483 views

kerberos error when active-directory user connects to Solaris machine

I have configured two CentOS machines to authenticate via kerberos and LDAP to Windows Server 2008 R2 Active Directory. I am now trying to do the same to a Solaris 10u9 (without upgrades to Kerberos ...
0
votes
1answer
1k views

Exporting user keytabs in MIT Kerberos

How can I export a Kerberos keytab with a given password, so I can use it to authenticate passwordlessly with MIT KfW, while still being able to authenticate with a password elsewhere? If it matters ...