The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
2answers
43 views

apache kerberos authentication tickets are not visible under klist

when i configured the apache authentication using the kerberos. it is working fine. It is asking the password and logging into the website. and it is creating a log information like this. ...
0
votes
1answer
42 views

Slave Kerberos behind NAT - kprop fails: Incorrect net address while decoding database size from client

I want to synchronize MIT Kerberos database from master to slave, which is in a different geographical location. kprop synchronization fails because of a NAT. Is there any solution to have kprop ...
0
votes
0answers
56 views

Establish FAST encrypted channel between linux client and windows server

I am trying to setup windows server for FAST encrypted channel support to test OTP pre authentication in kerberos. I have already tested on linux machine by deploying KDC using krb5-1.12.1 source ...
0
votes
0answers
35 views

Active Directory - Windows Kerberos integration

I integrated ActiveDirectory in Windows Server with Kerberos in Ubuntu machine I am able to generate tickets for the ActiveDirectory users in Ubuntu's Kerberos using 'kinit' command. Now would like to ...
1
vote
0answers
294 views

Cross-Realm trust verify failed with 'netdom' command

Question 1: Am having my ActiveDirectory in Windowsserver 2012 machine - its domain name is AD-DEMO.LOCAL Kerberos admin-server is in another Ubuntu machine - its realm KERBEROS.COM Added trust in ...
1
vote
0answers
150 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
1
vote
0answers
121 views

Why does MIT Kerberos kinit warn “Your passwod will expire” when your principal is what is about to expire?

While doing some experimenting I noticed that the MIT Kerberos version 5 "kinit" program will warn you when either your password is about to expire (within 7 days) or when your principal is about to ...
1
vote
1answer
456 views

Alfresco with only MIT Kerberos: What authentication.chain?

I want Alfresco to authenticate users using SSO with MIT Kerberos. What authentication.chain should I use? I tried authentication.chain=kerberos1:kerberos without success. Based on this answer I ...
1
vote
0answers
236 views

Alfresco with Kerberos: Error creating bean with name globalAuthenticationFilter

I configured Alfresco 4.2.c to work with MIT Kerberos, following the documentation. Because the documentation is only for Active Directory, I adapted some part to Kerberos by reading the forum. Upon ...
0
votes
1answer
161 views

Alfresco authentication chain for (MIT) Kerberos only? (no LDAP, no AD)

The Alfresco documentation seems to consider only LDAP or Active Directory cases. In my case, all users are in MIT Kerberos, but I don't use LDAP nor Active Directory. What authentication chain ...
2
votes
1answer
114 views

How does one remove an encryption type from a kerberos principal?

I would like to remove all of the des keys from the principal below, but have no idea how to do so without someone inputting the password. kadmin: getprinc user Principal: user@EXAMPLE.COM ...
2
votes
1answer
827 views

Windows 7 system won't talk to MIT Kerberos server

I've installed MIT Kerberos 1.10 on a Debian server and happily have my Debian clients authenticating with it. I'm having some trouble getting my Windows 7 machine to do the same, however. I've used ...
2
votes
3answers
6k views

Wrong principal in request (SSH/ GSSAPI/Kerberos/Debian)

I've set up two VMs on an "internal" (in VirtualBox meaning) network, one being a DNS server (dns1.example.com) and the other - a KDC and Kerberos admin server (kdc.example.com). The default and the ...
0
votes
1answer
417 views

OpenSSH + Kerberos SSO problem: Wrong principal in request

Thanks to your help , I am getting closer. Now at this point, I am getting the following message with logging in via ssh: debug1: Unspecified GSS failure. Minor code may provide more information ...
1
vote
1answer
5k views

Unable to Login to kadmin from Kerberos Client

I have a small problem of getting my client to authenticate to a kerberos server that I just setup. Whenever I run: [root@localhost log]# kadmin -r KERBEROS.MONZELL.COM -p host/kerberos.monzell.com ...
3
votes
2answers
282 views

Known services that don't use Kerberos authentication?

I'm looking to set up a Kerberos trust between MIT Kerberos5 and Active Directory. However, it's noted in my old Kerberos book from 2003 that "there are several applications, notably Microsoft ...
11
votes
5answers
3k views

Which kerberos flavor?

So I'm setting up a small network with all the standard stuff (files, email, etc.) and I've decided to go with a Kerberos+LDAP solution. Any ideas or recommendations on Heimdal vs. MIT? I've used MIT ...
3
votes
1answer
2k views

Single Sign On for intranet with Apache and Linux MIT Kerberos

EDIT: SOLVED! See my answer below. Greetings, I am looking for a way to do a single sign on to an intranet in the following manner: A Linux user logs on via a graphical frontend (for example, ...
2
votes
2answers
2k views

Linking Linux MIT Kerberos with a Windows 2003 Active Directory

Greetings, I was wondering how one might link a Linux MIT Kerberos with a Windows 2003 Active Directory to achieve the following: A user, USER@WINDOWDIRECTORY.INTERNAL, attempts to log in at an ...
1
vote
3answers
917 views

Moving from OpenLDAP/Kerberos to Active Directory

I have a well working setup using OpenLDAP for user information and Kerberos for authentication, but we need to have windows integration too, and for this we have decided that moving into Active ...