Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1136 questions
0
votes
1 answer

Authenticate client to Squid Proxy with Negotiate- Kerberos

My client machine is communicating with squid proxy by Basic Authentication mode. In Basic Authentication client is passing an authentication header like below to proxy {+add-header{Proxy-Authorization: Basic dGNvZTE6dGNvZTE=}} Since the basic…
John Thomas
  • 101
  • 2
0
votes
1 answer

Kerberos authentication ticket - Event ID 4768 - Audit failure

I am using kerberos to authenticate a user and its failing. Audit failure details in event viewer are following A Kerberos authentication ticket (TGT) was requested. Account Information: Account Name: HTTP Supplied Realm Name: TEST.COM User ID: …
user2896215
  • 105
  • 1
0
votes
2 answers

How to get past kerberos blocker on scp-ing files?

I have a cluster with one master and one slave. From the master node, I'm able to ssh into the slave just by doing: ssh -vvv @. Now, when I scp from master to slave it does not work: sudo scp -vvv @://,…
makansij
  • 255
  • 4
  • 11
0
votes
1 answer

Shibboleth SPNEGOAuthnConfiguration in CentOS server

I have requirement were the user's were already joined to domain logged in using the same credential from ldap server, they don't want to enter it again to login into shibboleth SSO, so I searched over Shibboleth document, it already has support for…
CoolMonster
  • 61
  • 5
0
votes
0 answers

KRB_AP_ERR_MODIFIED error with target name matching the server name

Over the last months, I've had the same problem on three different machines (Windows Server 2016, Windows 10, Windows Server 2008R2) in our domain. The symptoms are always the same: You cannot connect to shares on the affected PC (let's call it…
Heinzi
  • 2,138
  • 5
  • 30
  • 51
0
votes
1 answer

Heimdal kerberos ipropd-master failing on start-up with "open (null): Bad address" error

I am trying to set up a Heimdal KDC environment with one master and one replica. When I try to start the replication service on the master, it fails with this error: ipropd-master[22640]: open (null): Bad address The command I am running is…
user35042
  • 2,601
  • 10
  • 32
  • 57
0
votes
1 answer

ipa samba install failure socket did not correctly init

I am trying to setup a test environment to get ipa and samba. I have two vms with the network setup and everything running. I am trying to setup ipa and samba but I'm getting an error when trying to start samba service. Job for smb.service…
synking
  • 1
0
votes
0 answers

windows 2012 server won't let you login without Kerberos DES checked

Two new Windows Server 2012 R2 installs. One setup as a Domain Server. The other joins the domain. (on an account that is setup with the default stuff, but added to the Domain Admins group. (although, also did it with other non-domain…
Traderhut Games
  • 101
  • 2
0
votes
1 answer

IIS 8.5 permission problems

I have a Java program (running on a Windows 7 virtual machine) that uses JAAS and GSSAPI to get a resource (like, index.html etc.) from IIS (running on a Windows 2012 R2 virtual machine) It authenticates (using Kerberos) with an Active Directory…
dram
  • 1
0
votes
0 answers

kerberos for user authentication on MAC OS X El Capitan

We have kerberos running in our facility. We recently bought a new MAC Mini with MAC OS X El Capitan. I am trying to use PAM for kerberos for user authentication i.e., anyone with username and password on Kerberos should be able to login to MAC Mini…
user2979872
  • 123
  • 3
0
votes
3 answers

Insufficient quota exists to complete this operation, net ads join

I'm trying to join Active Directory in Xubuntu 16.04 in a enterprise business enviroment so I'll change the name of my REALM by MY.EXAMPLE.CORP. My issue is: when I run net ads join -U Administrator it appears: Failed to join domain: failed to join…
Ruben
  • 11
  • 1
  • 4
0
votes
1 answer

Setting up NTLM/Kerberos authentication for IIS 8, Server 2012 Workgroup

I need the following. My Server 2012 with IIS 8 installed is in a workgroup. Workstations are in a domain called 'hello.local' I need for users in the domain 'hello.local', to be authenticated against the IIS on my Server 2012. This way, i can log…
Markie Mark
  • 1
  • 3
0
votes
1 answer

can't open new powershell session from one server to another

I am trying to open a powershell session from one server to another. I can open sessions to servert1/2 which have the same configuration as far as I can tell. trustedhosts are the same, same user/pw being used. Yet when trying to open a session to…
C.Rosenstadt
  • 1
  • 2
0
votes
1 answer

kerberos authentication fail due time not sync

helloo all my problem happen like this. when trying to login into website cannot logon due to popup message happened showing no referal to server. checking system event find error mesage identify keberos authentication fail due to that…
user357972
  • 1
  • 1
0
votes
1 answer

kerberos request ticket server not found in keytab

TL;DR First: my server name is xy. Second: the domain I logon to is EXAMPLE.COM Third: this is my apache configuration AuthType Kerberos AuthName "Kerberos Login" KrbServiceName HTTP …
CDRO
  • 1
  • 1
  • 4
1 2 3
…
75 76