Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1136 questions
1
vote
1 answer

Is it possible to switch to Kerberos only Windows domain

Is it possible to configure both Windows servers and workstations (Windows 7) to use only Kerberos for authentication and not use NTLM for authentication within the Domain? I was told that Kerberos authentication fails if the target system is…
Konrads
  • 860
  • 2
  • 20
  • 38
1
vote
2 answers

Where are the Kerberos time outs in Windows 2008R2?

We have a DFS share that redirects users to a EMC CIFS share. Several end users are unable to access it and get the following Kerberos Security warning: The System Detected an attempt to compromise security I believe it's because the Kerberos…
makerofthings7
  • 8,821
  • 28
  • 115
  • 196
1
vote
0 answers

Setting up single sign-on between Mac client & OS X Server

I'm not "single sign-on" is the right terminology for what I'm trying to accomplish, so please correct me if I'm wrong. We have a Mac OS X Server and Mac clients. Kerberos and Open Directory are running and apparently happy. I imagine the following…
Meltemi
  • 559
  • 2
  • 11
  • 23
1
vote
2 answers

Changing user passwords under Kerberos/LDAP

I've set up Kerberos/LDAP on Ubuntu 11.04 Server according to this guide. My client machines are auto-mounting NFS volumes from the server using krb5. All is good: Users can log in to any of the machines in the office and their home directories…
BrianTheLion
  • 165
  • 2
  • 7
1
vote
2 answers

Kerberos LDAP and Ubuntu Login

I setup Kerberos and LDAP for directory management at an institution for Ubuntu OS. I got LDAP configured correctly and Kerberos. The user's home directory is in an LDAP directory. When the user logs in, the process of authentication grants the…
user1052943
  • 111
  • 2
1
vote
0 answers

Kerberos high availability failover, Apache Mod_auth_kerb, Using the Kerberos slave is slow

We host our own Redmine rails web application internally with Apache using Mod_auth_kerb and our internal Kerberos for authentication. We have 2 internal Kerberos servers KDC1 and KDC2. KDC1 is master. KDC2 is a slave to KDC1. When KDC1 is working…
caleban
  • 1,116
  • 4
  • 18
  • 34
1
vote
1 answer

Publishing Activesync through TMG with client certificates (403.7 Forbidden)

I'm trying to publish Exchange 2003 activesync on a Server2K3 box, through TMG 2010 on a 2008R2 box, using client certificate on Android mobiles. From what I can tell, the issue is with TMG, as when I connect directly to the mail server everything…
Tony Blunt
  • 167
  • 4
  • 14
1
vote
1 answer

Custom 401 error page served by Apache for firefox by not IE Kerberos Authorization by group

My Custom 401 error page gets served by Apache for firefox by not IE. I'm using Kerberos authentication and ldap group Authorization. Basically if a user is not in the proper group I'd like the 401 error page to show. This is working properly with…
RussellBallestrini
  • 191
  • 1
  • 1
  • 8
1
vote
3 answers

Can a Kerberos server interfere with Active Directory on the same network

I would like to set up a Kerberos server to authenticate users on our various Linux servers. However, the network that the Kerberos server will be on already has a Windows 2k3 domain controller on it. Is there any way that this Kerberos server can…
Swoogan
  • 2,007
  • 1
  • 13
  • 21
1
vote
3 answers

Disabling Windows password changes on Samba domain

When a user on one of our Windows clients hits ctrl-alt-delete to change his password, our Samba domain controller is notified and performs the password change. Unfortunately, the group policy rule requiring password complexity is ignored. Further,…
thras
  • 13
  • 1
  • 3
1
vote
1 answer

Unable to Login to kadmin from Kerberos Client

I have a small problem of getting my client to authenticate to a kerberos server that I just setup. Whenever I run: [root@localhost log]# kadmin -r KERBEROS.MONZELL.COM -p host/kerberos.monzell.com Authenticating as principal…
Rilindo
  • 5,058
  • 5
  • 26
  • 46
1
vote
1 answer

Problem with mixed cases in username

We have integrated a linux thin client with an AD using kerberos, pam and winbindd. We are using pam_mkhomedir to make the home dir, and that works fine. But the login scripts don't run when the AD users use mixed or upper case in there usernames.…
xpatrikh
  • 13
  • 1
  • 4
1
vote
1 answer

Kerberos authentication not working for one single domain

We have a strange problem regarding Kerberos authentication with Apache mod_auth_kerb. We use a very simple krb5.conf, where only a single (main) AD server is configured. There are many domains in the forest, and it seems that SSO is working for…
Michael Böckling
  • 301
  • 3
  • 15
1
vote
1 answer

Using Kerberos between two seperate domains

We run SharePoint 2007 in our envirnoment and currently have a non-transitive, external trust setup between the two domains because were planning on migrating to SharePoint 2010. Our SQL Server is in the domain 2, while domain 1 has the front end…
Bob
  • 11
  • 1
1
vote
2 answers

How do I use ldapsearch with a cross-realm ticket?

kinit user@DOMAIN.TLD klist -afe Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: user@DOMAIN.TLD Valid starting Expires Service principal 08/04/11 13:14:53 08/05/11 01:14:53 krbtgt/DOMAIN.TLD@DOMAIN.TLD renew…
84104
  • 12,698
  • 6
  • 43
  • 75
1 2 3
…
75 76