Questions tagged [kerberos]
Kerberos is a single sign-on (SSO) network authentication protocol designed to allow nodes, communicating over a non-secure network, to prove their identity to one another in a secure manner.
3,535
questions
0
votes
0
answers
4
views
Erlang SASL GSSAPI error: Cannot contact any KDC for realm
Sorry, if I'm not providing the right detail, I'm fairly new at this and it's the first time I'm trying to consume from kafka through kerberos authentication.
I'm using the brod_gssapi ([https://...
0
votes
0
answers
32
views
New-CimSession with using WMI protocol and Kerberos authentication
My app remotely collects some info from windows machines and now I wanna try to use CimSession with DCOM protocol and Kerberos authentication instead of classic WMI commands like Get-WmiObject and etc....
0
votes
1
answer
63
views
What should I use `WWW-Authenticate: Negotiate <value>` for, when authenticating using Kerberos?
I have a web server than returns a WWW-Authenticate: Negotiate HTTP header (no <value>), which indicates the client should authenticate using Kerberos.
Then the client generates a Kerberos token ...
0
votes
0
answers
23
views
Kerberos authentication only works with aes256-cts-hmac-sha1-96 for Windows 10
I have a Windows 10 server joined to a RedHat IDM realm that is using Kerberos. When a user tries to authenticate on a Windows 10 server, the following error is shown
On the IDM, looking at the /var/...
0
votes
0
answers
27
views
Grant access to Typo3 Middleware using Apache's <Location> when <Location /> is secured using Kerberos SSO
I can't find a way to unlock a middleware within one of my extensions for an an external (other domain) javascript ajax-call:
$.ajax({ type:"GET",
url:'https://intranet....
0
votes
0
answers
32
views
ASP.NET Core 6: Windows Authentication doesn't work in docker linux host
Environment:
Intranet
Domain (Active Directory 2012)
I'm trying to create an ASP.NET Core 6 application to run in a Docker (Linux) container with Windows authentication, and the goal is get the ...
0
votes
1
answer
39
views
How could session cookies get lost during OIDC redirection?
I have a java-based desktop app (with a java server) that's using the OIDC authorization code flow with Okta for authentication. It's working fine in several different instances, but a client has set ...
0
votes
1
answer
41
views
Having dificulties authenticating wifi users via Freeradius using Kerberos as a backend authenticator
Hey Stack Overflow folks,
So, here's the deal. We're running a WPA2 business setup, and our users get authenticated through FreeRADIUS, which is using LDAP to check passwords stored in NTLM hash.
We'...
-2
votes
1
answer
17
views
Problems with Kerberos auth to Active Directory from Ubuntu 22.04
I get the error KDC_ERR_S_PRINCIPAL_UNKNOWN when I try to authenticate to an Active Directory realm from an Ubuntu 22.04 machine joined to the domain, using Kerberos.
I have a Windows machine joined ...
0
votes
0
answers
12
views
Kerberos Implementation in Django
How do i implement an Kerberos SSO in Django?
I am new to Django and need something like a Documentation or Tutorial on how to integrate KErberos and LDAP as SSO in a Django app. I've searched now for ...
0
votes
0
answers
87
views
unable to install winkerberos or pykerberos
I am working on a python script. In the script I am running a powershell script using ntlm. I cannot use ntlm for production and kerberos is required.I am not able to install pykerberos or winkerberos....
0
votes
0
answers
24
views
Implementing Kerberos and LDAP in Django
firstly, i'm very new to Django.
I have developed a Django app that includes a ticket system. Users should only see their own tickets. Now this self service system should be connected to the Microsoft ...
0
votes
0
answers
25
views
Using Vert.x package io.vertx.ext.auth.kerberos.KerberosOptions is not permitted as it's no longer available
I wanted to update unused code that is now required in order for a Java Vert.x application to authenticate to Kerberos protected api endpoint. However the kerberos packages ( io.vertx.ext.auth....
0
votes
0
answers
42
views
Kerberos Authentication implementation in ASP.NET MVC 5(not core)
I am not able to find any proper resources which can show how to implement kerberos authentication using ASP.NET MVC. The resources which I am getting are either partly coded or is mainly based on ...
0
votes
0
answers
19
views
How to connect to mongodb service running with kerberos authentciation using mongo-java-driver
I'm not much aware of kerberos.Kerberos server is running on an ec2 instance,on another ec2 instance,installed kerberos client and mongodb 6.0.2 enterprise and mongo shell 1.10.6.I created user ...
0
votes
1
answer
53
views
How does a browser get Kerberos TGT and Service ticket
On a Windows host, which is a member of AD domain and authentication is Kerberos-based, how does a browser get TGT and Service ticket to access a specific service (for e.g. a proxy with kerberos ...
0
votes
0
answers
11
views
Getting "org.springframework.security.authentication.BadCredentialsException: Kerberos validation not succesful" exception
We are using Jaas.conf, BEST properties and spn to generate kerberos token and in the same application we are using spring security spn go filter to validate the token with keytab and system account.
...
0
votes
0
answers
15
views
How to get kerberos authentication on spark's executor
For some reason, I need to build a connection to access hbase in a mapPartition. hbase/hadoop both have kerberos enabled. the Spark application is also running under kerberos.
The hbase connection is ...
0
votes
0
answers
56
views
Single sign on with AD Service Account user with Kerberos results in Authentication error
We are running our Servlet based web application on Openshift infrastructure which is running on Wildfly 26 version. We are implementing SSO using Kerberos
We have created an Active Directory service ...
0
votes
1
answer
16
views
Call Kerberos node library from a React application
I am using NodeJS v18.18.0 to build a client React application that authenticates users via Kerberos. I intend to use node library kerberos (https://www.npmjs.com/package/kerberos). This package is a ...
0
votes
0
answers
43
views
Is it possible to get Kerberos logging using gssapi inside secure context?
I am using gssapi to create a Flask server that is protected by Kerberos authentication. I am wanting to debug some Kerberos errors I am seeing and hence I would like to turn on debug logging by means ...
0
votes
1
answer
61
views
Can ActiveMQ Artemis connect to Oracle via JDBC using Kerberos?
Checking ActiveMQ Artemis docs/files I only found that broker.xml could be configured as per below for database connection (example):
<core xmlns="urn:activemq:core">
<...
0
votes
0
answers
10
views
Connect to Hbase with Kerberos and TLS from Python
How can I connect to Hbase from Python with Kerberos and TLS enabled.
0
votes
0
answers
208
views
Kerberos kinit: Preauthentication failed while getting initial credentials
I am trying to set up a login verification system using Kerberos in a Docker container. I want to have a python script run shell commands to create a keytab file containing the user info and then use ...
-1
votes
1
answer
81
views
Python 3.11 broke Ansible WINRM connection
I wanted to use Microsoft AD Plugin in Ansible, so based on the pre-requisites, I tried to upgrade Python from 3.6.8 to greater version, exactly Python 3.11.6 and installed the main pre-requisites ...
0
votes
0
answers
46
views
Python Code Connecting to Hadoop Hive Kerberos Keytab through watson studio
I've a problem to connect to Hadoop hive through juypter notebook .
` from pyhive import hive
import kerberos
# Define the connection parameters
hive_host = 'XX.XX.XX.XXX'
hive_port = 10000 # ...
0
votes
0
answers
11
views
Java JAAS configuration when Kerberos credential cache is externally managed
Running our app as Java 17,
We connect to Kafka and DB using Kerberos using ticketcache.
When credential cache is managed externally managed. Do we need make renewTGT=true?
Also does renewTGT updates ...
0
votes
0
answers
67
views
How to negotiate HTTP request authentication by sending OS session data in python on linux?
Requirement:
Send a HTTP request via python requests library by using OS authentication (without manually providing user/pwd). I can do that in Python on Windows using "from ...
0
votes
0
answers
57
views
Problem with Kerberos authentication on a proxy server via Python requests
I'm trying to implement sending messages to a Telegram bot using Python using the requests library.
Here's a code snippet:
import requests
from requests_kerberos import HTTPKerberosAuth
answer = ...
1
vote
1
answer
110
views
Connect to HDFS using ticket cache instead of keytab file
I have two clusters(cluster 1 and cluster 2) and both are secured with kerberos authentication. I can only read the data from both clusters and cannot change configuration files on any of these ...
0
votes
0
answers
24
views
Request to IIS resource protected with "Windows authentication" from localhost returns Unauthorized
I have a following problem accessing a resource protected with use of "Widows authentication" on IIS
One unprotected site "Anonymous authentication" is trying to access a resource ...
0
votes
0
answers
58
views
How to use Kerberos authentication with ODBC driver in C# web application hosted in IIS?
I have a web application that connects to ODBC data source that requires Kerberos authentication. I use System.Data.ODBC to connect to ODBC data source:
using (OdbcConnection connection = new ...
1
vote
0
answers
51
views
Why HttpContext.Current.User.Identity.Name might have value before user signed in?
For context: I am working with .Net Framework 4.6.1 ASP.Net app deployed in IIS. Inside app we had implemented SSO authentication with Kerberos (that flow with HTTP 401 and WWW-Authenticate: Negotiate ...
1
vote
0
answers
98
views
Kerberos authentication error when golang client using librdkfka running on Alpine
I have a golang client using librdkafka with SASL-GSSAPI with Kerberos and it is working fine when runinng on Debian docker image.
On the other hand, it is not working when trying to run on Alpine ...
0
votes
0
answers
29
views
PowerBi using wrong kerberos credentials
i'm having an issue using power bi to connect to impala database throught ODBC with kerberos auth.
When I test the connection everything works fine. If I try to import the data on exel everything ...
0
votes
1
answer
69
views
Request to Kerberos authenticated API considered unauthorized despite having kerberos ticket in authorization header
I am trying to call a Flask API endpoint (http://monarch.example.com:8080/) hosted in Apache web server in a Linux machine. This endpoint is protected by Kerberos authentication. I use kinit user to ...
0
votes
0
answers
17
views
Error in connecting Superset with Hive Kerberos
As I'm trying to connect superset to hive kerberos, which uses sqlalchemy uri to connect. The uri im using to connect is: hive2://hkiva***.nk.******.com.:10000/adssit_cic-usr_vr;AuthMech=1;KrbRealm=...
0
votes
0
answers
44
views
Can’t connect to SQL using kerberos cache
I have Debian instance with ODBC Driver 18, and I'm trying to connect to windows-based SQL instance. For this I get credential cache using credentials fetcher. klist shows that cache is present on my ...
0
votes
0
answers
45
views
Error authenticating an API requester with kerberos library on a NodeJS API
I installed NodeJS 18.18 on a windows 10 machine. During installation I checked the box to automatically install the necessary tools (Python, Visual Studio build tools...). Then I installed kerberos ...
1
vote
0
answers
90
views
Keycloak and Kerberos integration using curl SSO
I have following setup given:
keycloak server at https://auth.example.com
connection with a LDAP provider configuration Kerberos options set in LDAP provider configuration
authentication with ...
0
votes
0
answers
78
views
IIS Reverse Proxy with Windows Authentication and user name forwarding
I need to connect legacy client systems doing Windows Authentication to a new backend that cannot participate in Windows Authentication.
For this purpose, I'm planning to use IIS, configure Windows ...
0
votes
0
answers
53
views
Get Kerberos SPNs for a specific account programmatically
In my server application on Windows I try to register a kerberos SPN using the function DsServerRegisterSpn from NtDsAPI.
For the case this fails (because of missing access rights) I would like to ...
0
votes
0
answers
16
views
Atlas Integration with kerberized Hbase and solr
I successfully configured Apache Atlas of version 2.3.0 with my HBase and Solr instances, and everything was functioning smoothly. Subsequently, I implemented Kerberos security for both HBase and Solr,...
0
votes
0
answers
38
views
Access remote hive table from Spark with Kerberos
I am running in spark in cluster 1 and there is a different cluster where I have hive running. In my spark job, I want to access the remote Hive table. I can access the cluster 1's hive using spark....
0
votes
0
answers
22
views
Connecting to SqlServer using integrated security and java kerberos [duplicate]
I'm trying to connect to sql server using integrated security with JavaKerberos authenticationScheme. It's because we want to connect from linux docker to ms sql.
I read the documentation from: https:/...
0
votes
1
answer
14
views
how to spark use overwrite jdbc connect open kerberos hive?
environment:original hadoop;open kerberos hive;depoly-mode:yanr-clint;every haoop node put certificate;
process:overwrite spark jdbcsource,spark use this souce connect hive,before connect have auth,...
0
votes
0
answers
100
views
How to read the computer security token to get group membership
I can read the user account token using:
[Security.Principal.WindowsIdentity]::GetCurrent()
And then get the groups the account is a member of.
How can I read the computer account token to get the ...
0
votes
1
answer
138
views
Kerberos authentication enabled web application generating non Kerberos token in IIS
We have enabled Kerberos authentication in two different servers under the IIS settings. But the Kerberos token which is generated in one of the servers always starting with "TlR". We have ...
0
votes
0
answers
69
views
unable to connect to hive with dbt and kerberos
My goal is to make data quality checks against the data which is stored in hive on a cluster.
I'm using dbt-core, dbt-hive libraries, and I have troubles connecting to that data.
My profiles.yml looks ...
0
votes
0
answers
41
views
Kerberos Authentication : REDIRECT_REMOTE_USER is disappearing
I am trying the Kerberos Authentication for my Drupal site. I got the REDIRECT_REMOTE_USER from the $_SERVER variable. But after getting its value for the first time, it disappeared from the $_SERVER ...