Questions tagged [kerberos]
Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.
80
questions
2
votes
0
answers
3k
views
Powerbroker Open : Cannot automount CIFS share, where is the kerberos ticket?
I am using Powerbroker Open (formerly Likewise Open) to join CentOS 7 machines to a Windows 2012 R2 domain. Login etc. works fine.
Now I am trying to use the automatic mount of home directories via ...
- 71
2
votes
1
answer
14k
views
OpenSSH + Kerberos SSO: No key table entry found for host/localhost.localdomain
SSO not working with OpenSSH - I have not been able to get GSSAPIAuthentication to work with Kerberos. Everytime I attempted to login, I kept getting prompted for the password.
During the ...
- 5,088
2
votes
2
answers
14k
views
2008 DC GPO - "Advanced Audit Policy Configuration" missing?
I'm trying to enable Kerberos Authentication auditing in a GPO for the purpose of sending auth events to an AD-integrated web filter appliance, and the instructions have me enable auditing of the ...
- 147
2
votes
1
answer
3k
views
Can a Windows machine authenticate against Samba with Kerberos when users are stored in AD?
I understand the title is probably less clear that it should be, but I couldn't think of anything better.
We have two domains, let's call them example.com and subnet.example.com. The former is ...
- 329
2
votes
3
answers
3k
views
Using Apache / Kerberos / Keytab to Authenticate Redmine Users Against Active Directory
We have a Debian (squeeze) server to which I have root access. It is running Apache, and Redmine is deployed to the server (currently using a local MySQL database for authentication).
Apache is ...
- 101
2
votes
1
answer
3k
views
Moving my website to different server changes authentication from Kerberos to NTLM
I have a webservice that is configured for Windows Authentication. The client code that invokes the WS passes along the credentials to the WS as follows:
myWebService.Credentials = System.Net....
2
votes
3
answers
11k
views
Wrong principal in request (SSH/ GSSAPI/Kerberos/Debian)
I've set up two VMs on an "internal" (in VirtualBox meaning) network, one being a DNS server (dns1.example.com) and the other - a KDC and Kerberos admin server (kdc.example.com). The default and the ...
- 928
1
vote
2
answers
3k
views
Initialise Kerberos ticket on ssh login using PAM
Right, so I am struggling a bit with PAM in Centos7.
I have no idea how to configure it manually and make the changes permanent so that I get a kerberos ticket after a successful ssh login.
The ...
- 282
1
vote
2
answers
834
views
Can anyone recommend a book on Kerberos that mentions AD 2008? [closed]
I've got a nice O'Reilly book on Kerberos from our library, but it was last updated in 2003. I'm pretty sure there have been changes and improvements since then, especially with AD 2008. Are there ...
- 14.5k
1
vote
1
answer
4k
views
Kerberos Authentication for Webservers
Before I blindly jump on "trial an error" tests, I'd like to ask some general questions on Kerberos Authentication for Webservers. I want to evaluate what's possible with Kerberos. The main benefit ...
- 128
1
vote
3
answers
3k
views
Disabling Windows password changes on Samba domain
When a user on one of our Windows clients hits ctrl-alt-delete to change his password, our Samba domain controller is notified and performs the password change.
Unfortunately, the group policy rule ...
- 13
1
vote
2
answers
2k
views
Kerberos authentication in IIS with .NET app under domain identity not working
Having a hell of a time trying to get a .NET web app to use Kerberos auth successfully, and would appreciate some assistance from the SF community.
Currently there is a Win2003/IIS6 server hosting a ...
user44172
1
vote
1
answer
11k
views
Domain Controller not auto enrolling Kerberos Certificate from new 2016 CA
I migrated a Windows 2008 R2 DC and Enterprise Root CA to a new Windows 2016 DC and CA. Everything seemed stable except I had a few RODCs and writeable DCs that were showing "Failed Requests&...
- 32.8k
1
vote
2
answers
13k
views
Linux SSSD with two AD Domains
I Joined my Centos Box to a Windows Active Directory Domain with
realm join --user=DomUser dom2.local
Without any Problems. The Domain hast a one-way Trust relationship to Dom1.
Our Windows Users ...
- 476
1
vote
2
answers
2k
views
Dovecot IMAP authenticating proxy using Kerberos/GSSAPI
I'm trying to set up Dovecot as authenticating reverse proxy, in front of an already running IMAP server to accomplish the following:
Have Dovecot authenticate users using Kerberos/GSSAPI (to allow ...
- 3,574
1
vote
2
answers
27k
views
Kerberos Event 4 servername showing username
We have a .Net Windows Service that uses a Httplistener and authenticates requests using Kerberos. When users are connecting via their browser, an error in the users event log shows a Kerberos Event ...
- 463
1
vote
2
answers
4k
views
Authenticating with Exchange WebDAV / Outlook Web Access
I'm having issues accessing Exchange WebDav / OWA from any machine but the IIS & Exchange server.
We've got a small development domain running Windows 2003. One server (which we'll call IIS_box) ...
- 293
1
vote
2
answers
6k
views
Windows Authentication KRB5KRB_AP_ERR_MODIFIED
Let me preface by saying, I've been on this issue for about a week and a half now and I can't figure it out. I think I'm close, but every time I've thought that so far, I was wrong. I've looked at ...
- 113
1
vote
1
answer
6k
views
Error: KDC has no support for encryption type
I have intermittent authentication issues on my ubuntu 15.04 servers. Periodically, authentication will just stop working. Eventually it will start working again on its own. Or, if I restart both smbd ...
- 83
1
vote
2
answers
34k
views
Samba4 & Active Directory Kerberos [Cannot contact any KDC for realm 'INTERNAL.CORP.COM' while getting initial credentials
Yesterday I configured an Active Directory Server using Arch Linux and Samba 4 following this guide.
I even added a client to the domain and was able to log in successfuly on my client. After a ...
0
votes
1
answer
2k
views
FSTAB CIFS kerberos
How can I force fstab to mount CIFS with machine account kerberos?
From logs it shows that cifs.upcall goes to:
cifs.upcall: get_cachename_from_process_env: cachename = FILE:/tmp/krb5cc
and not on /...
- 1
0
votes
1
answer
793
views
What changes with Kerberos authentication in IPv6 when everyone has a public IPv6 Address?
How should Kerberos authentication be set up with IPv6?
What implications are there when client devices each use a public, globally routeable IPv6 IP address?
What changes when setup this way ...
- 4,919
0
votes
2
answers
4k
views
Kerberos pre-authentication failed on nfs mount
I have the following nfs export:
/home/users 192.168.1.0/24(rw,sec=krb5p,no_subtree_check,nohide,async,anonuid=65534,anongid=65534)
When trying to mount that on a client I get:
client:/home # ...
- 249
0
votes
1
answer
2k
views
ksetup - Failed /GetEncTypeAttr : 0xc0000034
On the DC of a single-AD forest, I am logged in as the default domain administrator Administrator (in this case also the enterprise administrator). In an elevated PowerShell, I try to get the Kerberos ...
- 645
0
votes
3
answers
4k
views
Get Kerberos ticket with SSH
I'd like to get a Kerberos 5 ticket when ssh-ing to get to a fully-automated login solution.
Typically, you use kinit first and then ssh:
> kinit user@DOMAIN
user@DOMAIN's Password: (enter ...
- 101
0
votes
3
answers
8k
views
apache using mod_auth_kerb always asks for the password twice
(Debian Squeeze)
I'm trying to set apache up to use Kerberos authentication to allow AD users to log in. It is working, but prompts the user twice for a username and password, with the first time ...
- 7,056
0
votes
1
answer
4k
views
Samba4 and Kerberos configuration on a dedicated server
I try to set up Samba 4 on a dedicated server from kimsufi.com but I have difficulties configuring Kerberos and Samba4.
I am very confused about IP, Realm, Domain, NetBIOS, DNS etc. in Kerberos and ...
- 1
0
votes
0
answers
2k
views
Kerberos Double Hop Delegation from IIS to SQL server (using django)
I need to pass the credentials (Integrated Windows Authentication) from a django website on IIS onto a backend SQL server so that it runs under the proper user context.
This is how my setup looks so ...
- 41
0
votes
1
answer
555
views
Forward service records from main DNS to IPA server
I have a production DNS server (dns1.local) in Data Center environment, I build recently IPA server (ipa.example.com) that runs DNS as well in the same environment and it forwards requests to dns1....
- 101
0
votes
1
answer
1k
views
Kerberos Authentication in a Mixed (Windows and LINUX) Environment
I need to map the Service principal name for the user in an Active Directory from Linux environment, where my KDC is located, to Windows.
Is there a way to map the AD user from Linux rather than ...
- 101