3,586
questions
-1
votes
0
answers
20
views
How to Perform GET/POST Requests to a Server Using Kerberos Authentication in Go? [closed]
I'm working on a project using Go, and I need to make GET and POST requests to a server that requires Kerberos authentication. I've tried looking into libraries and examples, but I'm still unclear on ...
-4
votes
0
answers
16
views
My printer is not able to authenticate with my windows domain [closed]
I've encountered an issue which I unable to determine the root cause of why I unable to authenticate with windows domain on my printer's "Windows authentication" feature. here are the ...
0
votes
0
answers
15
views
Migrating from WildFly 10 to WildFly 32: Issues with Impala Data source Using Kerberos Authentication
I am in the process of migrating an application from WildFly 10 to WildFly 32. We have a datasource connection to an Impala database, which uses Kerberos authentication. Below is the working ...
0
votes
1
answer
20
views
Pipe stdout to program that only reads from file
I have two programs P (producer) and C (consumer). P can be run in such a way that writes to stdout. But C is a legacy program that only reads from a file on disk. As in ./C -f </path/to/file>.
...
0
votes
1
answer
31
views
kinit: Invalid integer value while getting initial credentials
I am trying to configure a keytab file to use with my service principal for Kerberos authentication between my Linux (RHEL9) server and my Microsoft Windows 2022 Server. The service principal is ...
0
votes
0
answers
17
views
Cloudera HDFS connection is failing at Kerberos login
I am using this code to connect to Cloudera HDFS:
import org.apache.hadoop.conf.Configuration;
import org.apache.hadoop.fs.FileSystem;
import org.apache.hadoop.fs.Path;
import org.apache.hadoop.fs....
0
votes
0
answers
29
views
ruby web request integrated auth/sspi
I am trying to write a ruby method that can fetch a url from a web server that requires integrated authentication. This is on Windows and the user already has access. I am looking to do it natively, ...
0
votes
1
answer
43
views
PyWinRm credentials getting rejected from doing windows to windows connection
I am using PyWinRm on my windows machine to connect to a remote host using Kerberos. In our environment we use pywinrm on our linux machines to run PowerShell commands all the time using Kerberos. The ...
0
votes
1
answer
58
views
windows gMSA and sMSA with desktop applications
We know how to use and configure Managed Service Account with windows-services and Scheduled-batch-tasks and run the service under the security context of MSA
Can we use the MSA for any installed ...
1
vote
1
answer
21
views
Is it possible to use single keytab file on server for authenticating users from different realms accessing server by same name?
I have two AD forests, and I do not want them to trust each other. I also do not want them to trust any other "third" forest.
I want to make web service with Kerberos authentication to be ...
0
votes
0
answers
40
views
Kerberos Spring Boot Custom Login
I have a Spring Boot Backend. And in my organization i use kerberos to authenticate users to my application. now, i want to implement a login for external users. External users, who are not in our ...
-1
votes
2
answers
46
views
How are Kerberos tickets managed and refreshed when using JDBC/HikariCP with a Keytab file on a Linux machine to connect to SQL Server
I'm managing several Java applications on a Linux machine that connect to a SQL Server database hosted on a Windows server using JDBC with HikariCP for connection pooling. These applications use ...
0
votes
0
answers
23
views
WCF routing with WCF service using Negotiate authentication
I have an existing WCF service that uses Transport security with Negotiate authentication with windows credentials.
The client uses impersonation with credentials accepted by the remote service. Now I ...
0
votes
1
answer
41
views
Kerberos Authentication for multiple domains with no common dns
We have created a container image and are running our playbooks through that execution environment.
There are 4 domains:
example1 domain has ex1 IP
example2 and example3 are currently working under ...
0
votes
0
answers
8
views
Configuration kerberos authorization via JDBC for Cloudera Apach Hive
I'm running Apach Hive in a Docker container and using the following image: https://github.com/big-data-europe/docker-hive
I want to add kerberos authorization to connect to Apach Hive via JDBC from ...
0
votes
1
answer
50
views
InitializeSecurityContext (Kerberos) in cross domain forest
I am trying to call the Windows system API InitializeSecurityContext (Kerberos) in a cross domain forest environment, unfortunately get a failure result.
Here is my environment setup:
two domain ...
0
votes
0
answers
30
views
How to install kerberos client in docker based on Ubuntu Focal image
I tried following docker command in docker file
RUN apt-get update && apt-get install -y krb5-user libpam-krb5
but it stuck expecting interaction from the use, even when i used -y switch.
12:...
0
votes
1
answer
72
views
how to configure spring boot kerberos implementation to get windows users id stored in ticket cache to achieve sso
im new to spring boot, im trying to integrate spring boot security with kerberos so that i can achieve sso and get windows user info in my application. since my windows user credential is stored in ...
0
votes
0
answers
49
views
Spark not asking for delegation tokens from ticket cache after upgrading to 3.5.1
We are not able to upgrade Spark from version 3.1.3 to 3.5.1 due to an authentication error.
Steps to reproduce the issue:
Create the Spark image from the binary.
Edit the image entrypoint in order ...
1
vote
0
answers
96
views
Kerberos authentication in IIS
I have 2 VMS. VM1 is a Windows AD Server with IIS installed and VM2 is a Windows 11 VM. Both VMs are joined on a domain.
I can access the default IIS webpage both on VM1 using localhost and on VM2 ...
0
votes
0
answers
34
views
failed authentication with kerberos
The project involves developing a secure authentication system using GSSAPI for a client-server connection, with the aim to operate everything locally on a single machine using Kerberos. The system is ...
0
votes
1
answer
78
views
Does integrated Windows authentication in Ansible require a physical connection to MSSQL server? [closed]
Description:
I'm currently setting up an Ansible playbook to connect to an MSSQL database server hosted on Windows using integrated Windows authentication. However, I'm uncertain about the requirement ...
0
votes
1
answer
92
views
How to Negotiate authentication with gMSA account in ASP.NET Core app running on Kestrel
I have an ASP.NET Core Web API that runs as a Windows service under gMSA (group Managed Service Account) in test on-prem AD environment using a Kestrel web server.
App uses Negotiate authentication (...
0
votes
0
answers
25
views
Hivemetastore - create external db failing due to kerberos authentication
I have a hive metastore setup on derby. I want to create an external table. The data sits on a remote hdfs location. I am using kerberos auth. My hive-site and core-site and hdfs-site have all the ...
0
votes
1
answer
92
views
How to organize http client requests authorization via spnego?
I am trying to authenticate on remote sever with kerberos, using http4s scala client.
After researching this tech, I realised that.
Firstly I need to make some empty request to server with no special ...
0
votes
0
answers
66
views
Nfs with Kerberos - Can't connect with sec=krb5*
I can't mount volumes using any sec=krb5*. sec=sys works fine
Machine 1 (M1): nfs-kernel-server/Kerberos [openSUSE] [192.168.2.255] (Yes it's .255 it's a /23 network)
Machine 2 (M2): Client [Debian] [...
0
votes
0
answers
172
views
Kerberos checksum failed in Keycloak docker container
Struggling for days now regarding the setup of Kerberos in a Keycloak 24.x docker container.
What I've done so far :
Creating a custom image installing krb5-workstation in my image
Mounting an ...
0
votes
0
answers
23
views
How to use Sublime to Edit Files in Remote Server Using Kerberos Authentication
I am trying to use Sublime Text to edit files in a remote server that I connect with a Kerberos ticket. Normally, I first get a Kerberos ticket, and then I can use open-ssh to connect to the server. ...
0
votes
0
answers
177
views
Negotiate Authentication validating user. Result: {result=BH, notes={message: received type 1 NTLM token
I have a Kerberos environment where my proxy expects Kerberos authentication. This environment has three hosts, a Windows client (joined to AD), a linux host running the proxy (joined to AD) and the ...
0
votes
1
answer
67
views
jna-Waffle interact with windows kerberos ticket cache?
we have a windows client app that use a groovy script to interact with a webapi server using spnego as authentication. This script use the waffle lib to query a new kerberos tokens, every time. ...
1
vote
1
answer
130
views
Encrypt message body using kerberos
How, we would encrypt me message body of the request using kerberos?
I have kerberos ticket active.
My main goal is to send first request as authentication part and it is ok, i get 200 from the WEC. ...
0
votes
0
answers
73
views
Is it possible to store a ticket cache for Kerberos not in file?
In my configuration i have:
Domain controller
Oracle database server (Windows Server 2016 Standard)
Client (Windows 10 Pro)
Kerberos authentication is configured. The ticket cache is stored in a ...
1
vote
1
answer
103
views
Apache Spark makes kinit with user specified in jdbc connection options instead of using cached ticket
I'm trying to connect from Hadoop cluster to GreenPlum database in Kerberized environment.
Simple java JDBC application connects successfully.
try (Connection conn = DriverManager.getConnection(url, ...
0
votes
0
answers
49
views
Remote SSH connection does not recognize kerberos ticket I created in the server
I executed the kinit command to generate a Kerberos ticket on my server, and it was successfully created (confirmed through the klist command).
After that, when I established an SSH connection to my ...
0
votes
1
answer
180
views
KRB5CCNAME is missing
The problem is I have no KRB5CCNAME in $_SERVER[] (php) for LDAP search.
I login to the server via kerberos gssapi, from Ubuntu to Windows Server 2012, using Samba.
On my site (PHP), I authorize with ...
0
votes
0
answers
70
views
dbeaver 24.0.0 could not connect to hive via zookeeper through kerberos auth
I have my keytab file configured and dbeaver.ini configured with correct keytab and jaas.conf, the config worked fine for phoenix db access through the kerberos, so I can say the dbeaver setting with ...
0
votes
0
answers
71
views
LsaLogonUser returning error code 0xC004848c for SmartCard Login
I am calling LsaLogonUser with the KERB_CERTICATE_LOGON struct pointing to a smart card. I am trying to authenticate a certificate with Azure/Entra that is Federated through WS-Fed. I am getting the ...
0
votes
0
answers
39
views
fail to connect hive from a Kubernetes pod
I am trying to connect a hive server from a Kubernetes pod
following code run well on a windows VM, but failed on a Kubernetes pod, the base image of the pod is amazoncorretto:17.0.11-alpine
package ...
0
votes
1
answer
208
views
Authentication with Negotiate in ASP.NET with docker container
After endless attempts to Negotiate authorization, I turn here.) The application itself works in Docker, files such as krb5.conf and keytab file have also been added, but there is still an ...
0
votes
0
answers
425
views
Keycloak kerberos authentication error: cannot find key of appropriate type to decrypt AP-REQ - AES256 CTS mode with HMAC SHA1-96)
I'm trying to setup Keycloak SSO to my web-site using Kerberos authentication. I' using:
Keycloak 23.04 on Centos 9
Windows based Active Directory
I used this guide to set it up Kerberos ...
0
votes
1
answer
211
views
How to Negotiate a Kerberos/NTLM Token in Java?
I'm trying to implement an HTTP proxy in Java that adds Windows Integrated Authentication to all requests.
What I have in mind is basically to negotiate the correct authentication scheme between the ...
0
votes
0
answers
18
views
Install kerberos packages using paramiko [duplicate]
I'm trying to automate installation of kerberos packages (krb5-kdc, krb5-admin-server, krb5-user) using python-paramiko library on Ubuntu server.
Ref article: https://www.atlantic.net/dedicated-server-...
-1
votes
1
answer
55
views
How do I use Kerberos js with options principal?
I am trying to use Kerberos.js - https://github.com/mongodb-js/kerberos
Specifically KerberosClient to authenticate against a windows authentication website. This works well, but I want to use the ...
0
votes
1
answer
668
views
Java 17 Allow RC4 HMAC while keeping allow_weak_crypto as false in krb5.conf
SSO has stopped working in our Spring App. since we upgraded to Java 17 with upgraded Spring libraries.
I am getting following error during authentication which relates to the fact that Java 17 ...
2
votes
0
answers
195
views
.Net 8 - Http Client - GET Call - Kerberos Authentication - Invalid Token Issue
We have an existing application in .Net 6 hosted in our firm which consumes a REST API exposed by another system within our firm. The application works just fine and gets the data from the REST API. ...
0
votes
1
answer
108
views
Why do POST requests not work using Spnego/Kerberos authentication with Spring Security Kerberos?
We have taken the sec-server-win-auth sample application from the Spring Security Kerberos documentation and extended it by a RestController. In this RestController we have defined some GET- and POST-...
0
votes
0
answers
31
views
Kafka list topic: TimeoutException
I got Kafka broker with kerberos authentication and trying to list topics getting org.apache.kafka.common.errors.TimeoutException
> ./kafka-topics.sh --bootstrap-server=10.90.5.106:6667 --list
[...
1
vote
0
answers
126
views
Kerberos Auth with JavaEE no longer working after upgrading Wildfly 15 to 26 using Elytron
I have a simple JavaEE Application running on my wildfly to authenticate users with kerberos. The user sends a request from the web application and receives the login JWT-Token. The beginning of the ...
0
votes
1
answer
739
views
kinit: Pre-authentication failed: Permission denied while getting initial credentials
While struggling to standup a Linux hosted SQL Server container connected to Active Directory, I started to get errors from kinit when refreshing my krb5 tickets
kinit: Pre-authentication failed: ...
0
votes
1
answer
150
views
Authenticate an endpoint using Kerberos
I am hosting a simple endpoint in a console application that looks like this
string[] prefixes = { "http://+:8080/" };
HttpListener listener = new HttpListener();
foreach (string prefix in ...