2 votes

What is the best way to achieve SSO for Apache 2.4 within a Windows domain?

SSPI is generic Windows interface to both Kerberos and NTLM; it's the Microsoft equivalent of GSSAPI. A module that uses SSPI should accept both mechanisms – though it's up to the client to decide ...
u1686_grawity's user avatar
1 vote
Accepted

How to enable Kerberos authentication with a specific user when disabling RC4_HMAC_MD5 encryption type?

Change account B's password. This will derive new Kerberos keys for that account, and if the change was done on a non-ancient DC, it will result in AES keys being stored (alongside the rest). Then log ...
u1686_grawity's user avatar
1 vote
Accepted

Ansible.builtin.wait_for issue weird behaviour with kerberos

Finally found a solution which “fit” the Windows target. I have to use ansible.windows.win_wait_for module so there’s no need to delegate_to my localhost.
motorbass's user avatar
  • 353
1 vote

Cross-realm Kerberos/SPNEGO configuration with multiple domain controllers and multiple application servers

Should I create two different SPNs for both app1.example1.com and app2.example1.com? For HTTP auth, the URL determines what SPN the client will look for. (It's a lot like "what hostname should I ...
u1686_grawity's user avatar
1 vote

Files in Azure file share can only be opened as read-only on one specific Profile on Windows 10 - (DFS-N with Domain Based Authentication)

We had a On-prem DC at this location, Somehow after we decommission this DC and now the Clients are authenticating directly with the DC in Azure. I re-applied the NTFS permission using the "...
work's user avatar
  • 21

Only top scored, non community-wiki answers of a minimum length are eligible