Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1136 questions
2
votes
1 answer

How does a Kerberos Client determine the Service Name portion of an SPN?

If I deploy a server call FOO/host.example.com@myrealm how does a client become aware that the service name is FOO? ENV: Unix / MIT kerberos 1.4 or 1.10 I see windows has some sort of mapping: How exactly does the HOST/machine SPN work?, what…
jouell
  • 601
  • 1
  • 5
  • 20
2
votes
1 answer

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the id gergely.polonkai tells me I'm…
GergelyPolonkai
  • 359
  • 1
  • 5
  • 12
2
votes
0 answers

Integrating Kerberos authentication on Apache with a Git server

First time asking a question here so I hope I'm in the right place to do so. I've also searched for similar problems on here, but couldn't find anything quite as similar. Here's my problem. We currently have a git server (using Gitorious) that is…
Alocer
  • 21
  • 2
2
votes
0 answers

Authentization agains Samba4 domain controler and not working kinit

I've a problem with Samba 4 and Kerberos. If I call kinit, it writes Client not found in Kerberos database while getting initial credentials. I find out, that the Kerberos works with user name only, but the system identifies all domain users with…
Theodor Keinstein
  • 181
  • 1
  • 11
2
votes
1 answer

Problems mounting Kerberos authenticated NFS share on CentOS 6.4

I'm trying to mount a Kerberos authenticated NFS share on a CentOS 6.4 machine. I have tried exporting the protected share from both another CentOS 6.4 machine and from our NetApp with the same results. The CentOS machines and the NetApp are all…
Peter Loron
  • 168
  • 2
  • 8
2
votes
2 answers

Adding new SPNs to existing service ids

We have a tomcat server using spring-security kerberos to authenticate users to the webpage against active directory. There are around 25 domain controllers. The site has two CNAME based DNS aliases. The site currently has one Service ID with SPNs…
jmh
  • 146
  • 4
2
votes
2 answers

Apache SSO through Kerberos using Machine Account

I'm attempting to get Apache on Ubuntu 12.04 to authenticate users via Kerberos SSO to a Windows 2008 Active Directory server. Here are a few things that make my situation different: I don't have administrative access to the Windows Server (nor…
watkipet
  • 242
  • 2
  • 3
  • 10
2
votes
1 answer

Kerberos & signle-sign-on for website

I have a website running on a Linux computer using Apache. I've employed mod_auth_kerb for single-sign-on Kerberos authentication against a Windows Active Directory server. In order for Kerberos to work correctly, I've created a service account in…
Dylan Klomparens
  • 614
  • 2
  • 8
  • 22
2
votes
1 answer

mod_auth_kerberos "Unspecified GSS failure"

I did an apache 2.4 fresh install. I'd like to use kerberos authentication. I compiled and install mod_auth_kerb modules. here is my config SSLRequireSSL AuthName "Kerberos login" AuthType Kerberos KrbMethodNegotiate…
ampy
  • 21
  • 1
  • 1
  • 2
2
votes
0 answers

Synology DSM4.3 with Kerberos and NFSv4

According to the press releases of Synology DSM4.3 can do NFSv4 and Kerberos. Actually, in the Tab with NFS settings, there is a button for Kerberos settings. But I cannot find any guidance anywhere. I have a KDC running on a seperate host. I want…
Lars Hanke
  • 281
  • 2
  • 15
2
votes
1 answer

How does one remove an encryption type from a kerberos principal?

I would like to remove all of the des keys from the principal below, but have no idea how to do so without someone inputting the password. kadmin: getprinc user Principal: user@EXAMPLE.COM Expiration date: [never] Last password change: Thu May 26…
84104
  • 12,698
  • 6
  • 43
  • 75
2
votes
2 answers

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I get the following error: crypto: enum value…
Maria José
  • 131
  • 3
  • 12
2
votes
1 answer

House roaming profiles on realm trusted samba server?

Raison D'être I am attempting, so far unsuccessfully, to house roaming profiles for an Active Directory domain on a realm trusted Ubuntu 12.04LTS ZFS-on-Linux file server. The end goal is to have an inter-operable file server to house autofs nfs…
84104
  • 12,698
  • 6
  • 43
  • 75
2
votes
1 answer

Why is Kerberos security failing for our ADFS proxy server?

We have a WCF service that uses active federation to authenticate callers via AD FS 2.0 and it's working fine internally. Now we want to expose it to the outside world, so our server team set up a server in the DMZ for the service and an AD FS Proxy…
Rick Liddle
  • 158
  • 1
  • 7
2
votes
2 answers

2008 DC GPO - "Advanced Audit Policy Configuration" missing?

I'm trying to enable Kerberos Authentication auditing in a GPO for the purpose of sending auth events to an AD-integrated web filter appliance, and the instructions have me enable auditing of the Kerberos Authentication services by going…
Jon Heese
  • 147
  • 1
  • 2
  • 13
1 2 3
…
75 76