The kerberos-keytab tag has no wiki summary.
0
votes
0answers
12 views
Kerberos gss_acquire_cred() failed: An invalid name was supplied error
I'm trying to set up a single sign on system using LDAP, Kerberos and Drupal on a Ubuntu server. I have done some configuring for them all 3 and the last peace of problem remains this error in Apache ...
0
votes
0answers
16 views
kerberos cifs multiuser mount from AD PDC
I'm trying to mount a cifs folder on a ubuntu server with multiuser support from a windows DC.
I can get user kerberos tickets as root on the server and mount the directory with kerberos without any ...
1
vote
1answer
89 views
What is the kerberos keytab file used for in UNIX/AD kerberos authentication?
I have proved that UNIX/AD Kerberos authentication works without the presence of a keytab file so I'd like to know whether I should worry about it (given I'll need an individual keytab for each server ...
0
votes
2answers
43 views
can't login after generating keytab file
I generated a keytab file with the following command:
ktpass /out http-web.keytab /mapuser Administrator@my.domain.bar /princ HTTP/localhost:8080@my.domain.bar /pass *
However, now I can't seem to ...
-1
votes
2answers
41 views
How to find out domain name for Win 2k8 server
I'm following this blog post: http://blog.springsource.com/2009/09/28/spring-security-kerberos/
It says:
For this to work, every web applications needs to be registered at the
Kerberos server ...
0
votes
0answers
69 views
F5 authentication using kerberos keytab
Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
2
votes
2answers
1k views
error reading keytab file krb5.keytab
I've noticed these kerberos keytab error messages on both SLES 11.2 and CentOS 6.3:
sshd[31442]: pam_krb5[31442]: error reading keytab 'FILE: / etc/ krb5. keytab'
/etc/krb5.keytab does not exist on ...
0
votes
1answer
141 views
Why does ktutil list show some clients, but kinit says client unknown?
When I run ktutil list, I get a list of several clients. However, when I run kinit for any of the listed clients, I always get client unknown. Any ideas?
0
votes
0answers
220 views
Kerberos and multiple SPN on the same account
I have Squid service on the linux box named SERV, and I successfully configured Kerberos authentication with AD (windows server 2008), by simply setting SPN HTTP/serv.domain.com on the computer ...
1
vote
0answers
152 views
Creating keytab for computer account to decrypt packet capture
We are having an issue with our blackberry server (EWSTest fails at autodiscover lookup) and I am running a packet capture with Wireshark in an attempt to diagnose the issue. There is a conversation ...
4
votes
2answers
2k views
ActiveDirectory Kerberos keytab unusable from Linux
I am configuring Kerberos authentication for Alfresco CIFS protocol fully implemented in Java (JLAN project). That is not the first time, I used to set it up right in a single shot.
In the same ...
0
votes
1answer
87 views
Sudden catastrophic failure of kerberos
I've been playing with my openAFS setup, and adding keys for the afs principle for kerberos. Now, suddenly, Kerberos has gone down (or something).
Kadmin gives the following error:
kadmin -p admin
...
2
votes
1answer
2k views
help using setspn and ktpass
I'm trying to set up the SPNs and create a keytab file for tomcat kerberos spnego Single sign on.
the server running tomcat7 is ubuntu-ad1.wad.eng.hytrst.com
the KDC is kerberos.wad.eng.hytrust.com
...
3
votes
1answer
118 views
Why do kerberos HOWTOs specify to copy keytabs securely to the host? Is networked kadmin not secure?
Kerberos HOWTOs often have words similar to these:
Securely transfer (via flash drive, disk, or encrypted connection) the keytab to the client host.
Is logging in on the client host as root, ...
0
votes
1answer
405 views
kerberos error when active-directory user connects to Solaris machine
I have configured two CentOS machines to authenticate via kerberos and LDAP to Windows Server 2008 R2 Active Directory. I am now trying to do the same to a Solaris 10u9 (without upgrades to Kerberos ...
0
votes
1answer
983 views
Exporting user keytabs in MIT Kerberos
How can I export a Kerberos keytab with a given password, so I can use it to authenticate passwordlessly with MIT KfW, while still being able to authenticate with a password elsewhere? If it matters ...
