Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1136 questions
0
votes
1 answer

Forward service records from main DNS to IPA server

I have a production DNS server (dns1.local) in Data Center environment, I build recently IPA server (ipa.example.com) that runs DNS as well in the same environment and it forwards requests to dns1.local, I want to configure an ipa client…
Hatem Mashaqi
  • 101
  • 1
  • 2
0
votes
1 answer

Kerberos and LDAP login

I want to manually login to a ldap-server. For authentication Kerberos is used. I am registered there with username and pw. kinit username@servername It works fine and a valid TGT is created which I can view using klist But how to proceed after.…
Hansi Zimmrer
  • 1
  • 1
0
votes
0 answers

What changes with Kerberos Authentication in IPv6 when using NAT?

How should Kerberos Authentication be setup with IPv6? Of you're using NAT for IPv6 where there is a single public IPv6 address and it translates to the machines inside in the ULA range?
leeand00
  • 4,807
  • 13
  • 64
  • 106
0
votes
1 answer

What changes with Kerberos authentication in IPv6 when everyone has a public IPv6 Address?

How should Kerberos authentication be set up with IPv6? What implications are there when client devices each use a public, globally routeable IPv6 IP address? What changes when setup this way instead of using a NAT as was the norm with IPv4?
leeand00
  • 4,807
  • 13
  • 64
  • 106
0
votes
2 answers

Build a production IPA server without integrate DNS and NTP with client

We are going to deploy a centralized authentication Linux server (RHEL6) for our RedHat/CentOS servers in Data Center environment. I made some search I believe Free IPA is the best choice since it's more secure, it has better sudo and HBAC rules,…
Hatem Mashaqi
  • 101
  • 1
  • 2
0
votes
1 answer

What kind of SPN is required to delegate client credentials to a SMB Share?

I'm trying to delegate KERBEROS authentication from an SQL Server to a file server over OLEDB. Is there a particular Service Principle Name that is used to delegate credentials from an SQL Server to a file server? For instance, if I run a SQL…
leeand00
  • 4,807
  • 13
  • 64
  • 106
0
votes
1 answer

Apache not finding the kerberos principal in keytab file

Virtual host has been configured with these options; AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate On KrbMethodK5Passwd Off KrbAuthRealms EXAMPLE.COM KrbAuthoritative On KrbServiceName…
Morten Nilsen
  • 278
  • 5
  • 15
0
votes
1 answer

NFSv4 with Kerberos - idmap stops working after ~35 minutes

All machines are running CentOS 6.5. We have about 85 client machines doing a Kerberized NFSv4 mount (sec=krb5p) to a server. This weekend, the server was changed (serverA changed to serverB). Everything appears to work, except, on one a few…
Matt
  • 1,037
  • 2
  • 14
  • 20
0
votes
1 answer

Error trying to enable LDAP with kerberos authentication with GPFS

I have 3 RHEL7 nodes with GPFS / Spectrum Scale 4.2.0.0 installed. The 3 nodes have been setup with GPFS as a cluster with a GPFS filesystem created. I am trying enable LDAP based authentication with kerberos on that filesystem. Here's the…
mrbarker
  • 137
  • 10
0
votes
2 answers

gssapi/kerberos/active directory/ubuntu - Wrong principal in request

I'm trying to setup a Clientserver with a Webservice to which Users of an Active Directory should be able to login with SSO. I'm using SPNEGO with Kerberos on a Ubuntu 14.04 Server and nginx proxy to Naviserver for the Webservice to do that and get…
Sky
  • 11
  • 3
0
votes
1 answer

Kerberos 5 won't install on Debian 8.2 or 8.3

I've been running some VMs in VirtualBox and cannot get Kerberos5 installed. I keep receiving the error: Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may…
tokyotech
  • 56
  • 3
0
votes
1 answer

Multi-factor auth with Kerberos and RADIUS

I am looking for a solution in order to allow a multi-factor authentication for a Kerberos-based logon service. By reading some articles, I found some good references about RADIUS, that provides a set of features in order to achieve this…
vdenotaris
  • 123
  • 2
  • 8
0
votes
0 answers

kerberos authentication to linux from windows

We have mostly unix/linux server in our data center. We access them from our workstations running windows using putty. All the workstations are part of an AD domain but the servers are not. Kerberos is configured in the workstations and while…
varun
  • 351
  • 2
  • 11
0
votes
1 answer

Grant Kerberos Ticket on successfull authentication against third party password store

I am currently building a system where I would like to deploy Kerberos. However my external constraints on the user management do not allow me to authenticate the users against Kerberos itself. I do have to authenticate the users against a third…
Blackclaws
  • 276
  • 1
  • 2
  • 5
0
votes
1 answer

psql: duplicate GSS authentication request

What does it mean by saying 'duplicate' ? How to troubleshoot this? guest@www:~$ klist Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: user/admin@SOHONET Valid starting Expires Service principal 12/11/2015 07:37:08 …
user319773
  • 1
  • 2
1 2 3
…
75 76