8

I am creating a Java open source package that makes it easy to connect with HttpClient 3.1 to resources that are protected by NTLm v1/v2 and Kerberos.

I need to test this tool against real world servers. Are there any publicly available endpoints that are protected by NTLM or Kerberos that I can get a user and password to test against?

Basically I am looking for something like Browserspy for NTLM/Kerberos. Also a public site using self signed certificates would be helpful for testing.

0

A bit late to the party but ...

The freeipa project has a public demo realm. See the instructions.

$ kinit admin@DEMO1.FREEIPA.ORG
Password for admin@DEMO1.FREEIPA.ORG: 
$ klist 
Ticket cache: KEYRING:persistent:1000:1000
Default principal: admin@DEMO1.FREEIPA.ORG

Valid starting       Expires              Service principal
05/09/2019 20:53:50  05/10/2019 20:53:44    krbtgt/DEMO1.FREEIPA.ORG@DEMO1.FREEIPA.ORG
$ klist 
Ticket cache: KEYRING:persistent:1000:1000
Default principal: admin@DEMO1.FREEIPA.ORG

Valid starting       Expires              Service principal
05/09/2019 20:54:21  05/10/2019 20:53:44  HTTP/ipa.demo1.freeipa.org@DEMO1.FREEIPA.ORG
05/09/2019 20:54:21  05/10/2019 20:53:44  HTTP/ipa.demo1.freeipa.org@
05/09/2019 20:53:50  05/10/2019 20:53:44  krbtgt/DEMO1.FREEIPA.ORG@DEMO1.FREEIPA.ORG

The http ticket appeared after kinit'ing and visiting https://ipa.demo1.freeipa.org

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.