Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1136 questions
0
votes
0 answers

Configuring PAM to access a Kerberized cluster

I have the following situation: I have a server running RHEL 7.4. This server's main purpose is to host an RStudio Server Pro instance, which allows users to connect to a kerberized Hadoop cluster in a different realm to leverage its distributed…
xeroqu
  • 113
  • 1
  • 1
  • 5
0
votes
0 answers

Login/permissions problems after installing Kerberos client

Login/permissions problems after installing Kerberos client After setting up a kerberos server (on a separate machine) and installing kerberos client on Ubuntu 16.04 desktop (and laptop), I have authentication and permissions problems I believed are…
Paul B
  • 11
  • 4
0
votes
1 answer

Detect whether a user is using keytab or password in Windows

So my question has been explained from the title. I'd like to know how to detect whether a user is using keytab or password for authentication to Domain Controllers. I'm thinking about checking for log file to see what session has been used and if…
Ender
  • 604
  • 3
  • 9
  • 13
0
votes
1 answer

Why both userPassword and krbPrincipalKey

When configuring MIT Kerberos to use an LDAP database instead of DB2, I was surprised to see that user password hashes are stored in two different fields: userPassword and krbPrincipalKey. Seems the hashing algorithms may be different, but that…
Ryan
  • 420
  • 5
  • 13
0
votes
1 answer

Kerberos Authentication in a Mixed (Windows and LINUX) Environment

I need to map the Service principal name for the user in an Active Directory from Linux environment, where my KDC is located, to Windows. Is there a way to map the AD user from Linux rather than mapping them using setSPN in the Windows environment?…
karthik
  • 101
  • 4
0
votes
0 answers

Using OpenLDAP as back end for Kerberos

We want to integrate our existing security setup (Apache Knox, OpenLDAP, Apache Ranger) with Kerberos. So what I understood through some blogs that we can use OpenLDAP as a back-end for the Kerberos database. But facing some issues and confusion…
anwaar_hell
  • 101
  • 2
0
votes
1 answer

Add Service Principal Name to Keytab file on Windows

What command can I run on windows to add a SPN to a keytab file on Windows? It seems all the documentation I can find is for linux.
MagicL
  • 131
  • 2
0
votes
2 answers

query Kerberos encryption modes supported by AD through LDAP

In short: I need a way to retrieve the encryption modes permitted in the network security policy of a Microsoft DC. The encryption mode is essential to creating the right set of keys for service principals in the local keytab of a host. User…
phg
  • 81
  • 1
  • 9
0
votes
1 answer

Simple way to secure a local network from unauthorized internal access to resources

Imagine this simplified scenario: a small business has an owner, a bookkeeper, a part-time sysadmin and a few dozen employees; the company has an all-Linux LAN. (Most computers run Arch Linux.) No outside (WAN) access to the LAN is configured; LAN…
MountainX
  • 681
  • 3
  • 12
  • 25
0
votes
1 answer

Is there any problem using the ftpd that comes with Kerberos on CentOS?

I need to configure ftpd on a CentOS 5.3 host to allow anonymous ftp (upload and download) from a well defined directory. I wish the setup to be as simple as possible, and to introduce as little new dependencies as possible. Scanning the current…
Chen Levy
  • 283
  • 3
  • 12
0
votes
1 answer

How to see what Kerberos Encryption is being used?

I need to show what encryption is being used for kerberos on Windows Server 2008 R2. Is there a command I can run? Is kerberos also used for local Windows Server account authentication or is it only for Active Directory?
neildeadman
  • 664
  • 2
  • 20
  • 33
0
votes
2 answers

Group policy not updating on Windows Server 2012 R2

I have a small solution for one of our customers. There are 3 servers, a Domain Controller, Session Host Server and a Sage Server. Just recently we've noticed that group policies are no longer applying to users logging in to the Session Host server.…
John
  • 525
  • 3
  • 16
  • 32
0
votes
1 answer

Why does sshd ask for a host service principal when authenticating a user via pam or KerberosAuthentication

I've setup Ubuntu for testing purposes. -Installed MIT kerberos (latest) -Installed OpeenSsh(latest) I've setup and have working both KerberosAuthentication and pam_krb5 types of authentication as well as GSSAPIAuthentication. All is well there.…
jouell
  • 601
  • 1
  • 5
  • 20
0
votes
2 answers

sshd and Kerberos - getent passwd

When setting up sshd with Kerberos on Ubuntu, one needs to "make sure that each each user has a valid account, either on the local host (via adduser or similar), or through a shared source such as LDAP Why is that? I can see if you use the…
jouell
  • 601
  • 1
  • 5
  • 20
0
votes
2 answers

Given X.500 directories and PKI, why use Kerberos?

I'm aware that Kerberos can use PKI, PKI provides encryption and authentication, Kerberos is designed more for authentication than encryption, Microsoft implements the Kerberos KDC by "using Active Directory as its account database," and that Active…
mellow-yellow
  • 431
  • 5
  • 14
1 2 3
…
75 76