Skip to main content
Filter by
Sorted by
Tagged with
-1 votes
0 answers
20 views

How to Perform GET/POST Requests to a Server Using Kerberos Authentication in Go? [closed]

I'm working on a project using Go, and I need to make GET and POST requests to a server that requires Kerberos authentication. I've tried looking into libraries and examples, but I'm still unclear on ...
Denis Korovin's user avatar
-4 votes
0 answers
16 views

My printer is not able to authenticate with my windows domain [closed]

I've encountered an issue which I unable to determine the root cause of why I unable to authenticate with windows domain on my printer's "Windows authentication" feature. here are the ...
chummer's user avatar
0 votes
0 answers
15 views

Migrating from WildFly 10 to WildFly 32: Issues with Impala Data source Using Kerberos Authentication

I am in the process of migrating an application from WildFly 10 to WildFly 32. We have a datasource connection to an Impala database, which uses Kerberos authentication. Below is the working ...
Mohan's user avatar
  • 473
0 votes
1 answer
20 views

Pipe stdout to program that only reads from file

I have two programs P (producer) and C (consumer). P can be run in such a way that writes to stdout. But C is a legacy program that only reads from a file on disk. As in ./C -f </path/to/file>. ...
stuyguy's user avatar
  • 247
0 votes
1 answer
31 views

kinit: Invalid integer value while getting initial credentials

I am trying to configure a keytab file to use with my service principal for Kerberos authentication between my Linux (RHEL9) server and my Microsoft Windows 2022 Server. The service principal is ...
Kevin's user avatar
  • 2,856
0 votes
0 answers
17 views

Cloudera HDFS connection is failing at Kerberos login

I am using this code to connect to Cloudera HDFS: import org.apache.hadoop.conf.Configuration; import org.apache.hadoop.fs.FileSystem; import org.apache.hadoop.fs.Path; import org.apache.hadoop.fs....
Ramakrishna rayudu's user avatar
0 votes
0 answers
29 views

ruby web request integrated auth/sspi

I am trying to write a ruby method that can fetch a url from a web server that requires integrated authentication. This is on Windows and the user already has access. I am looking to do it natively, ...
rismoney's user avatar
  • 531
0 votes
1 answer
43 views

PyWinRm credentials getting rejected from doing windows to windows connection

I am using PyWinRm on my windows machine to connect to a remote host using Kerberos. In our environment we use pywinrm on our linux machines to run PowerShell commands all the time using Kerberos. The ...
dddayz's user avatar
  • 1
0 votes
1 answer
58 views

windows gMSA and sMSA with desktop applications

We know how to use and configure Managed Service Account with windows-services and Scheduled-batch-tasks and run the service under the security context of MSA Can we use the MSA for any installed ...
testuser7's user avatar
1 vote
1 answer
21 views

Is it possible to use single keytab file on server for authenticating users from different realms accessing server by same name?

I have two AD forests, and I do not want them to trust each other. I also do not want them to trust any other "third" forest. I want to make web service with Kerberos authentication to be ...
filimonic's user avatar
  • 4,534
0 votes
0 answers
40 views

Kerberos Spring Boot Custom Login

I have a Spring Boot Backend. And in my organization i use kerberos to authenticate users to my application. now, i want to implement a login for external users. External users, who are not in our ...
Hadzic Nikola's user avatar
-1 votes
2 answers
46 views

How are Kerberos tickets managed and refreshed when using JDBC/HikariCP with a Keytab file on a Linux machine to connect to SQL Server

I'm managing several Java applications on a Linux machine that connect to a SQL Server database hosted on a Windows server using JDBC with HikariCP for connection pooling. These applications use ...
Dralexus's user avatar
0 votes
0 answers
23 views

WCF routing with WCF service using Negotiate authentication

I have an existing WCF service that uses Transport security with Negotiate authentication with windows credentials. The client uses impersonation with credentials accepted by the remote service. Now I ...
Ingmar H.'s user avatar
0 votes
1 answer
41 views

Kerberos Authentication for multiple domains with no common dns

We have created a container image and are running our playbooks through that execution environment. There are 4 domains: example1 domain has ex1 IP example2 and example3 are currently working under ...
Ramya's user avatar
  • 11
0 votes
0 answers
8 views

Configuration kerberos authorization via JDBC for Cloudera Apach Hive

I'm running Apach Hive in a Docker container and using the following image: https://github.com/big-data-europe/docker-hive I want to add kerberos authorization to connect to Apach Hive via JDBC from ...
Alex Petrov's user avatar
0 votes
1 answer
50 views

InitializeSecurityContext (Kerberos) in cross domain forest

I am trying to call the Windows system API InitializeSecurityContext (Kerberos) in a cross domain forest environment, unfortunately get a failure result. Here is my environment setup: two domain ...
Gong Yu's user avatar
  • 65
0 votes
0 answers
30 views

How to install kerberos client in docker based on Ubuntu Focal image

I tried following docker command in docker file RUN apt-get update && apt-get install -y krb5-user libpam-krb5 but it stuck expecting interaction from the use, even when i used -y switch. 12:...
porlock's user avatar
0 votes
1 answer
72 views

how to configure spring boot kerberos implementation to get windows users id stored in ticket cache to achieve sso

im new to spring boot, im trying to integrate spring boot security with kerberos so that i can achieve sso and get windows user info in my application. since my windows user credential is stored in ...
gkeepa's user avatar
  • 143
0 votes
0 answers
49 views

Spark not asking for delegation tokens from ticket cache after upgrading to 3.5.1

We are not able to upgrade Spark from version 3.1.3 to 3.5.1 due to an authentication error. Steps to reproduce the issue: Create the Spark image from the binary. Edit the image entrypoint in order ...
maron's user avatar
  • 1
1 vote
0 answers
96 views

Kerberos authentication in IIS

I have 2 VMS. VM1 is a Windows AD Server with IIS installed and VM2 is a Windows 11 VM. Both VMs are joined on a domain. I can access the default IIS webpage both on VM1 using localhost and on VM2 ...
sanny_gomes's user avatar
0 votes
0 answers
34 views

failed authentication with kerberos

The project involves developing a secure authentication system using GSSAPI for a client-server connection, with the aim to operate everything locally on a single machine using Kerberos. The system is ...
Angelo Pagotto's user avatar
0 votes
1 answer
78 views

Does integrated Windows authentication in Ansible require a physical connection to MSSQL server? [closed]

Description: I'm currently setting up an Ansible playbook to connect to an MSSQL database server hosted on Windows using integrated Windows authentication. However, I'm uncertain about the requirement ...
Lucifer007's user avatar
0 votes
1 answer
92 views

How to Negotiate authentication with gMSA account in ASP.NET Core app running on Kestrel

I have an ASP.NET Core Web API that runs as a Windows service under gMSA (group Managed Service Account) in test on-prem AD environment using a Kestrel web server. App uses Negotiate authentication (...
ispa's user avatar
  • 1
0 votes
0 answers
25 views

Hivemetastore - create external db failing due to kerberos authentication

I have a hive metastore setup on derby. I want to create an external table. The data sits on a remote hdfs location. I am using kerberos auth. My hive-site and core-site and hdfs-site have all the ...
isha kulkarni's user avatar
0 votes
1 answer
92 views

How to organize http client requests authorization via spnego?

I am trying to authenticate on remote sever with kerberos, using http4s scala client. After researching this tech, I realised that. Firstly I need to make some empty request to server with no special ...
Ostap Strashevskii's user avatar
0 votes
0 answers
66 views

Nfs with Kerberos - Can't connect with sec=krb5*

I can't mount volumes using any sec=krb5*. sec=sys works fine Machine 1 (M1): nfs-kernel-server/Kerberos [openSUSE] [192.168.2.255] (Yes it's .255 it's a /23 network) Machine 2 (M2): Client [Debian] [...
Francisco Pena's user avatar
0 votes
0 answers
172 views

Kerberos checksum failed in Keycloak docker container

Struggling for days now regarding the setup of Kerberos in a Keycloak 24.x docker container. What I've done so far : Creating a custom image installing krb5-workstation in my image Mounting an ...
Arnaud F.'s user avatar
  • 8,410
0 votes
0 answers
23 views

How to use Sublime to Edit Files in Remote Server Using Kerberos Authentication

I am trying to use Sublime Text to edit files in a remote server that I connect with a Kerberos ticket. Normally, I first get a Kerberos ticket, and then I can use open-ssh to connect to the server. ...
Seyhan Gul's user avatar
0 votes
0 answers
177 views

Negotiate Authentication validating user. Result: {result=BH, notes={message: received type 1 NTLM token

I have a Kerberos environment where my proxy expects Kerberos authentication. This environment has three hosts, a Windows client (joined to AD), a linux host running the proxy (joined to AD) and the ...
bluesky's user avatar
  • 21
0 votes
1 answer
67 views

jna-Waffle interact with windows kerberos ticket cache?

we have a windows client app that use a groovy script to interact with a webapi server using spnego as authentication. This script use the waffle lib to query a new kerberos tokens, every time. ...
Madgui's user avatar
  • 425
1 vote
1 answer
130 views

Encrypt message body using kerberos

How, we would encrypt me message body of the request using kerberos? I have kerberos ticket active. My main goal is to send first request as authentication part and it is ok, i get 200 from the WEC. ...
user14073111's user avatar
0 votes
0 answers
73 views

Is it possible to store a ticket cache for Kerberos not in file?

In my configuration i have: Domain controller Oracle database server (Windows Server 2016 Standard) Client (Windows 10 Pro) Kerberos authentication is configured. The ticket cache is stored in a ...
Anastasia's user avatar
1 vote
1 answer
103 views

Apache Spark makes kinit with user specified in jdbc connection options instead of using cached ticket

I'm trying to connect from Hadoop cluster to GreenPlum database in Kerberized environment. Simple java JDBC application connects successfully. try (Connection conn = DriverManager.getConnection(url, ...
pal548's user avatar
  • 11
0 votes
0 answers
49 views

Remote SSH connection does not recognize kerberos ticket I created in the server

I executed the kinit command to generate a Kerberos ticket on my server, and it was successfully created (confirmed through the klist command). After that, when I established an SSH connection to my ...
Keren's user avatar
  • 1
0 votes
1 answer
180 views

KRB5CCNAME is missing

The problem is I have no KRB5CCNAME in $_SERVER[] (php) for LDAP search. I login to the server via kerberos gssapi, from Ubuntu to Windows Server 2012, using Samba. On my site (PHP), I authorize with ...
Akuro's user avatar
  • 1
0 votes
0 answers
70 views

dbeaver 24.0.0 could not connect to hive via zookeeper through kerberos auth

I have my keytab file configured and dbeaver.ini configured with correct keytab and jaas.conf, the config worked fine for phoenix db access through the kerberos, so I can say the dbeaver setting with ...
an_interesting_name's user avatar
0 votes
0 answers
71 views

LsaLogonUser returning error code 0xC004848c for SmartCard Login

I am calling LsaLogonUser with the KERB_CERTICATE_LOGON struct pointing to a smart card. I am trying to authenticate a certificate with Azure/Entra that is Federated through WS-Fed. I am getting the ...
atlredsox's user avatar
0 votes
0 answers
39 views

fail to connect hive from a Kubernetes pod

I am trying to connect a hive server from a Kubernetes pod following code run well on a windows VM, but failed on a Kubernetes pod, the base image of the pod is amazoncorretto:17.0.11-alpine package ...
jiming wang's user avatar
0 votes
1 answer
208 views

Authentication with Negotiate in ASP.NET with docker container

After endless attempts to Negotiate authorization, I turn here.) The application itself works in Docker, files such as krb5.conf and keytab file have also been added, but there is still an ...
Jura Jacko's user avatar
0 votes
0 answers
425 views

Keycloak kerberos authentication error: cannot find key of appropriate type to decrypt AP-REQ - AES256 CTS mode with HMAC SHA1-96)

I'm trying to setup Keycloak SSO to my web-site using Kerberos authentication. I' using: Keycloak 23.04 on Centos 9 Windows based Active Directory I used this guide to set it up Kerberos ...
sorrysalmon's user avatar
0 votes
1 answer
211 views

How to Negotiate a Kerberos/NTLM Token in Java?

I'm trying to implement an HTTP proxy in Java that adds Windows Integrated Authentication to all requests. What I have in mind is basically to negotiate the correct authentication scheme between the ...
Adrian Diemer's user avatar
0 votes
0 answers
18 views

Install kerberos packages using paramiko [duplicate]

I'm trying to automate installation of kerberos packages (krb5-kdc, krb5-admin-server, krb5-user) using python-paramiko library on Ubuntu server. Ref article: https://www.atlantic.net/dedicated-server-...
Abhishek Agarwal's user avatar
-1 votes
1 answer
55 views

How do I use Kerberos js with options principal?

I am trying to use Kerberos.js - https://github.com/mongodb-js/kerberos Specifically KerberosClient to authenticate against a windows authentication website. This works well, but I want to use the ...
Shelco's user avatar
  • 13
0 votes
1 answer
668 views

Java 17 Allow RC4 HMAC while keeping allow_weak_crypto as false in krb5.conf

SSO has stopped working in our Spring App. since we upgraded to Java 17 with upgraded Spring libraries. I am getting following error during authentication which relates to the fact that Java 17 ...
user8373873's user avatar
2 votes
0 answers
195 views

.Net 8 - Http Client - GET Call - Kerberos Authentication - Invalid Token Issue

We have an existing application in .Net 6 hosted in our firm which consumes a REST API exposed by another system within our firm. The application works just fine and gets the data from the REST API. ...
Goutham Anandhan's user avatar
0 votes
1 answer
108 views

Why do POST requests not work using Spnego/Kerberos authentication with Spring Security Kerberos?

We have taken the sec-server-win-auth sample application from the Spring Security Kerberos documentation and extended it by a RestController. In this RestController we have defined some GET- and POST-...
Benjamin's user avatar
0 votes
0 answers
31 views

Kafka list topic: TimeoutException

I got Kafka broker with kerberos authentication and trying to list topics getting org.apache.kafka.common.errors.TimeoutException > ./kafka-topics.sh --bootstrap-server=10.90.5.106:6667 --list [...
cpawali's user avatar
  • 276
1 vote
0 answers
126 views

Kerberos Auth with JavaEE no longer working after upgrading Wildfly 15 to 26 using Elytron

I have a simple JavaEE Application running on my wildfly to authenticate users with kerberos. The user sends a request from the web application and receives the login JWT-Token. The beginning of the ...
R4yY's user avatar
  • 132
0 votes
1 answer
739 views

kinit: Pre-authentication failed: Permission denied while getting initial credentials

While struggling to standup a Linux hosted SQL Server container connected to Active Directory, I started to get errors from kinit when refreshing my krb5 tickets kinit: Pre-authentication failed: ...
fiat's user avatar
  • 15.9k
0 votes
1 answer
150 views

Authenticate an endpoint using Kerberos

I am hosting a simple endpoint in a console application that looks like this string[] prefixes = { "http://+:8080/" }; HttpListener listener = new HttpListener(); foreach (string prefix in ...
sanny_gomes's user avatar

1
2 3 4 5
72