Questions tagged [kerberos]
Kerberos is a single sign-on (SSO) network authentication protocol designed to allow nodes, communicating over a non-secure network, to prove their identity to one another in a secure manner.
3,392
questions
0
votes
0
answers
10
views
kerberos error running hdfs with python subprocess while spark session is open
When starting a session with pyspark and running hdfs commands I get the following error:
WARN ipc.Client: Exception encountered while connecting to the server : org.apache.hadoop.security....
0
votes
0
answers
9
views
How to join Debian server to Active Directory via a Read-Only Domain Controler (RODC)
I'm banging my head against the walls for a week now with this problem.
I've never encounter any difficulties to join a server to an AD via a WRDC but that's not the same with RODC...
At the end, the ...
0
votes
0
answers
21
views
Windows Kerberos application issues and Event 5071
We're experiencing issues with a third-party application running on Windows 2016 that uses Kerberos and SSPI (Windows Security Support Provider interface) where the vendor has suggested this could be ...
0
votes
0
answers
10
views
LDAP address book with password entry
I installed OpenLDAP on my ubuntu server, and realized that the address book is in the public domain without a password. That is, anyone who knows the values ou=,dc=,dc= can connect it and get the ...
1
vote
0
answers
25
views
Is there GSSAPI encryption support in pg/pgx libraries?
So I am trying to connect to postgres in golang using GSSAPI (kerberos). Currently I am using pgx library along with gopgkrb5. I am successfully connecting and authenticating with gssapi, the only ...
0
votes
0
answers
10
views
KRBError: KDC cannot accommodate requested option - when Constrained Delegation is Enabled
Having got an SSO solution fully working using Spnego/Kerberos within a Windows Tomcat environment which allows my windows domain user to be used to make a connection to an IBMi via JTOpen which then ...
1
vote
0
answers
22
views
Connection to Hive from python (3.9.7) via PysimpleGUI
I am trying to connect to hive from python (script) and the connection is successful. However when I am passing the same conn str details via a GUI i created, I get the error :
gaierror: [Errno 8] ...
0
votes
0
answers
9
views
storm-twitter hdfsBolt hiveBolt failure on Kerberized cluster
Trying to set up a storm-twitter stream on cluster using hdfsBolt and HiveBolt for flushing data to disk/hive table. using https://github.com/pvillard31/storm-twitter as reference. Followed all ...
0
votes
0
answers
30
views
RHEL8 and GSSAPI Kerberos authenticate through Apache issue
I'm trying to run an apache virtualhost, on a machine currently running Red Hat Enterprise Linux release 8.5 (Ootpa), with Kerberos authentication using the new GSSAPI module (replacement of ...
1
vote
0
answers
10
views
SMB authentication via domain accounts from non-domain machine
I would like to ask if somebody could explain me how exactly user/account is authenticated in following scenario:
SMB File Server is part of the domain
access to the File server is granted via domain ...
0
votes
0
answers
7
views
while running hdfs namenode -bootstrapStandby
we have Apache hadoop cluster up and running with high availability
and Kerberized - no issues here
0
votes
0
answers
43
views
Spring Application with SSO using Windows Credentials(via Kerberos)
I have a spring application with a login screen that authenticates credentials that the user has entered with users on our Active Ditectory(using LDAP).
However I'd like to add the capability of SSO , ...
0
votes
0
answers
39
views
Unable to connect hive through JDBC java
I am trying to connect hive through java(eclipse). Hive is working on the linux server, where I have installed it.
I have imported all the jar files.
I am using this code
BasicConfigurator.configure();...
0
votes
1
answer
62
views
Continue when HTTP authentication fails
I have created an app (backend and frontend) that is mainly used on a Windows intranet. I'm using Kerberos authentication to do SSO so that anyone logged in to Windows domain is automatically ...
0
votes
0
answers
24
views
Quarkus MSSQL with IntegratedSecurity, is it possible?
Has anyone gotten quarkus to connect to an MSSQL database using integratedsecurity=true in the JDBC url? I have used this in the past based on Microsoft's instructions here but have not been able to ...
0
votes
0
answers
14
views
Windows authentication returns 403 - Forbidden
I have 2 systems
web which runs as windows service on kestrel
web api which also runs as windows service on kestrel, but runs on another machine
In web aplication i have windows authentication which ...
0
votes
1
answer
24
views
Kerberos Authentication in Racket
I'm trying to access a REST API in Racket, and I need to use Kerberos authentication (similar to requests-kerberos in Python).
Is there a way to do this? I'm using the http-easy package but can switch ...
1
vote
0
answers
29
views
nifi kerberos login issue
I'm setting up secured nifi-1.9.2 using kerberos Authentication. I set kerberos server and add principal. then apply kerberos info to nifi.properties / authorizers.xml / login-identity-providers.xml ...
0
votes
0
answers
46
views
Separate Apache Kafka clusters unreachable at the same time - kafka_network_socketserver_networkprocessoravgidlepercent goes to zero
We have 4 Kafka clusters:
ENV1: 6 brokers and 3 zookeepers
ENV2: 6 brokers and 3 zookeepers
ENV3: 8 brokers (on 2 DCs, 4-4 brokers) and 9 zookeepers (on 3 DCs, 3-3-3 nodes)
ENV4: 16 brokers (on 2 DCs,...
0
votes
0
answers
13
views
.NET Api Kerberos (Negotiate) Authentication
I am working on authentication on an API Core application, using Kestrel, running on windows 10
The appication normally uses openId/Cookie authentication, and now I try to set up a Kerberos ...
0
votes
0
answers
14
views
Kerberos .NET Core Authentication Development environment
I'd like to try Kerberos authentication for my API (.NET Core 5).
What would be the easiest way to set up a development environment for that (I have a single machine on windows10) ?
I read about ...
-1
votes
0
answers
10
views
how to get keytab in spring application with user login and password?
Requires ldap authentication using kerberos protocol, want to use KerberosLdapContextSource,
keytab file required, i have only login and password, but in KerberosLdapContextSource need path to keyTab, ...
0
votes
1
answer
10
views
Does liquibase support kerberos authentication with mongodb connection?
Can only find examples for oracle db using kerberos. Is there any way I can use kerberos authentication while using liquibase with mongodb?
0
votes
0
answers
16
views
Does KerberosSubjectProvider in the MongoDB Java driver reacquire TGTs?
The documentation for KerberosSubjectProvider states that
An instance of this class will cache a Kerberos Subject until its TGT is close to expiration, at which point it will replace the Subject with ...
0
votes
0
answers
47
views
HaProxy With Kerberos Authentication(With SSL)
I'm using haproxy to load balance more than one .net applications. IIS servers cofigured for running https and haproxy too. There are only one self signed certificate, and it's subject contains all of ...
0
votes
0
answers
15
views
Keycloak Kerberos Custom Flow
I need to implement custom authentication flow in Keycloak. I want to have Kerberos execution as Alternative, but I need to add custom logic right after it based on a UserModel retrieved from LDAP and ...
0
votes
1
answer
40
views
Python Oracle Connection using cx_Oracle and Kerberos Auth
Is there a way to use the oracle python driver package cx_Oracle and specify Kerberos authentication?
I've seen this done using oracle jdbc drivers, but not with cx_Oracle specifically. Below is my ...
0
votes
0
answers
29
views
Trying to get hostent from a name-less server
I'm having some issues with my freeIPA.
Which I think is leading to the issue - each time I am leaving computer for few hours (or sometimes minutes), I have to re do
$ kinit user
in order to get an ...
0
votes
0
answers
22
views
Run Pyspark application inside Spark application
Due to a specific need, I am solving the problem of running a python application inside a scala application.
Here is the sample code of my applications.
Parent application (Scala):
import scala.sys....
0
votes
0
answers
40
views
kinit in bash script don't work with php exec function
I have a problem that I have not been able to solve for several weeks.
I created a registration page that uses the php language to put the user, password and other elements in the database.
I use ...
0
votes
0
answers
24
views
NTLM/Kerberos works on browser but not with my app with Alamofire
Since an authentication change in our server, I have to add kerberos authent in our ios app. I tried everything found on internet but nothing works.
Here is my code
private static let ...
0
votes
0
answers
17
views
Kerberos GoLANG- how to call rest api which kerberos enabled from golang code-
how to call rest API which Kerberos enabled from golang code-
I have the rest API http://imc-whoami-flask.rf3stg.mfgint.com/who which basically authenticates and returns the username. ( This API uses- ...
0
votes
0
answers
35
views
How to use Nginx + Gunicorn + Django to authenticate Kerberos users?
I refactored my project code, we used apache + Django, and now use Nginx + gunicorn + Django replace
But I met an issue, after use "spnego-http-auth-nginx-module"(https://github.com/stnoonan/...
0
votes
0
answers
98
views
IIS Errors 2148074248 and 2148074254 when using Kerberos Authentication
I am trying to develop a ASP.NET Core web application which uses Kerberos authentication and delegation to forward the identity of the authenticated user to another REST API (PI Web API). For more ...
1
vote
1
answer
19
views
multiple GSS providers in golang pgconn?
Let's imagine I have to connect to postgres using kerberos mupltiple times in one application. Recently kerberos support has been added to pgconn and pgx packages, but there is one limitation to that. ...
0
votes
0
answers
29
views
Apple Kerberos SSO : Get TGT in Objective C Application
I have a Mac SSO setup. Mac User is local and machine is in AD domain. With JAMF I have installed Apple SSO extension for kerberos auth. I can log in to AD using this.
I have a proxy setup (wingate) ...
0
votes
1
answer
86
views
passwordless LDAP login and get user information using Kerberos ticket in PHP
I'm trying to implement SSO on some intranet sites in our company using FreeIPA/Kerberos. But information on this topic is very thin.
I have three machines running in my test network:
FreeIPA v4.9.8 ...
0
votes
0
answers
12
views
kRB Ticket issues
Namenode and zk service went down and try to restart getting below error.
Open source hadoop cluster with KRB security enabled
ERROR TSaslTransport: SASL negotiation failure
javax.security.sasl....
0
votes
0
answers
24
views
Open source hadoop cluster - enable kerberos - AD integration
I have hadoop cluster with open source newly created.
wanted setup kerberos with AD (AD is in place - created OU systems users -in AD )
Now i want to create principal and key tabs for all.
Is there ...
0
votes
1
answer
260
views
Kerberos SSO Not working after Chrome Update
We use Kerberos SSO for our SAP Business Objects Application and after the last week's Chrome upgrade to version 101.0.4951.54, the SSO stopped working on chrome, but it still works fine in IE11. Has ...
1
vote
1
answer
117
views
Python requests, Kerberos and NTLM
I've been recently working on a project in which I need to access a asp.net web API in order to get some data. The way I've been gaining access to this API so far is by manually setting the cookies ...
0
votes
0
answers
75
views
How to proxy MSSQL connections over TCP proxy with cached Kerberos credential?
I need to proxy MSSQL connections over a TCP proxy using cached kerberos credentials. The idea is to authenticate against the database with kerberos, cache the cred, and then use that cred from a ...
2
votes
1
answer
484
views
Kerberos SSO stopped working after Chrome update
I'm running Alfresco site with Kerberos SSO and everything worked fine until last Chrome update (101.0.4951.54). Nothing changed in settings, IE still works, but in Chrome it prompts for credentials ...
0
votes
0
answers
14
views
Linux nfs shares encrypted through kerberos but no clue how it works to grant access through keytabs
There are 2 nfs shares on our linux redhat servers to host the live and landing data. There is keytab refreshed ( ticket produced) every 30 minutes , apparently it give system account an access to ...
0
votes
0
answers
56
views
WebApp authentication with Kerberos with JWT as session management... does it make sense?
I have to setup a webapp with some kind of session management and an authentication with Kerberos and I am a little bit lost... I just wanted to know from you pros if this approach makes sense at all ...
0
votes
0
answers
19
views
Kerberos on OCP for quarkus
Can someone help if they implemented kerberos on OCP. Tried via quarkiverse site and able to generate ticket for principal but while connecting with soap getting unauthorized exception.
Anyway to ...
0
votes
1
answer
102
views
Java 17 Update - Cannot find key of appropriate type to decrypt AP-REQ - RC4 with HMAC
I have a productive Java application using Kerberos for SSO.
After I update Java from version 16 to 17, I run into the following Error:
Cannot find key of appropriate type to decrypt AP-REQ - RC4 with ...
0
votes
0
answers
15
views
How can I organise kerberos keytabs and ccaches?
I have a bit of a problem understanding how to design a system that communicates using the kerberos protocol. Let's imagine - I have an application instance that has a large number of plugins that ...
0
votes
0
answers
35
views
app cannot find files through file path when running on cloud foundry
My project using application.yml to store properties.
spring:
profiles: local
kerberos:
truststore:
key: truststore.jks
file: kafkatool-qa\\truststore.jks
...
0
votes
1
answer
21
views
Kerberized Apache Kafka consumer not creating groups
I am using version 2.13. Kafka is able to produce messages but not able to consume messages after investigation I found that consumer groups are not getting created and hence the issue.
I am able to ...