Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1136 questions
0
votes
1 answer

Autofs + NFS + LDAP sudo problems

I have a setup very similar to Dan Bishop's Ubuntu 12.04 Ultimate Server Guide. I actually created a series of ansible scripts to automate this process on my github. So I have ldap+kerberos set up on a machine that client boxes are connecting to.…
jgrowl
  • 103
  • 4
0
votes
1 answer

kerberos: kadmin interface not working

We are using kerberos for authentication with pam module. We need to reinstall kerberos on another machine. So , I took kerberos dump and planned to restore using it. kdb5_util -sf stash load kdc.dump After that , I can able to access…
kannanrbk
  • 181
  • 2
  • 2
  • 9
0
votes
1 answer

Kerberos authentication between 2 applications

We work on a server 2003 and server 2008 R2 enviroment. I'm familiar with the basic usage of the Kerberos protocol where the protocol authenticates a client when he tries to use a shared resource (server, folder, printer, etc.). We have three…
Spivi
  • 33
  • 5
0
votes
1 answer

AD accounts on centos 6.4 not showing up despite successfull wbinfo -u

I have a centos 6.4 box with samba 3.6.9 which I have connected to MS server 2008 R2. That part seems to work fine, since I can see my AD users and groups with wbinfo -u and wbinfo -g. What does not work is using the AD users on the centos box. I…
Isaac
  • 1,195
  • 3
  • 25
  • 43
0
votes
1 answer

Kerberos + Ldap Setup not working with ssh

I have a Kerberos 5 + LDAP configuration in the same server. They both work well (I assume). Kerberos works fine when asking for a TGT. The problem comes when I try to login from client1 to client2 via passwordless ssh... It keeps asking me for a…
hecstevez
  • 47
  • 8
0
votes
2 answers

Kerberos pre-authentication failed on nfs mount

I have the following nfs export: /home/users 192.168.1.0/24(rw,sec=krb5p,no_subtree_check,nohide,async,anonuid=65534,anongid=65534) When trying to mount that on a client I get: client:/home # mount -t nfs4 -o sec=krb5p server:/home/users…
d_inevitable
  • 209
  • 1
  • 6
  • 19
0
votes
2 answers

Kerberos with active directory from linux

I have windows stations and a linux server - and I would like to perform SSO using Windows-Kerberos (via Active Directory - the same one all users on the windows station use). And so - I have searched many examples and ways of acheving this goal:…
user967710
0
votes
1 answer

NFS + Kerberos: can regular users access mounted directory without Kerberos ticket (kinit)?

I had this issue, which turned out to be caused by lack of Kerberos ticket. So the user can access NFS mount after doing kinit. Is there any way to let users access NFS mounts without a need to acquire Kerberos ticket? Update: Please note that the…
Mike
  • 598
  • 7
  • 16
0
votes
1 answer

NFS4 with Kerberos: DNS not enough, need entries in /etc/hosts (Why?)

I've had some hard time configuring NFS4 with Kerberos last time. Finally I made it but there are few things I do not fully understand yet. One of them is: why DNS resolution of hostnames is not enough? I have 2 machines: nfsserver, nfsclient. Both…
Mike
  • 598
  • 7
  • 16
0
votes
1 answer

How to list Samba 4 shares using server's IP and Kerberos authentication?

I am successfully able to list the Samba 4.0.3 shares by using smbclient -L myhostname -k command. However I am unable to do the same by using smbclient -L 192.168.1.2 -k and I get the session setup failed: NT_STATUS_LOGON_FAILURE error. However…
KristoZ
  • 26
  • 2
0
votes
1 answer

NFS4 + Kerberos: BAD_ENCRYPTION_TYPE, GSS: Encryption type not permitted, hang on "doing downcall"

I am trying to get NFS4 + Kerberos to work on Debian Squeeze. I have 3 test machines: nfsserver, nfsclient, nfskerberos What I've got is: root@nfsclient:~# mount -v -t nfs4 -o sec=krb5 nfsserver.mydomain.com:/export /import mount.nfs4: timeout set…
Mike
  • 598
  • 7
  • 16
0
votes
1 answer

Multihop Kerberos delegation on IIS7 / Windows 2008

So here I am again dealing with probably the number one support question on IIS, SPNs. I am not a novice when it comes to this, having lived the pains of getting SSRS front ends to delegate for SQL and SSAS back-ends in a number of different…
tlum
  • 257
  • 1
  • 8
0
votes
2 answers

Kerberos authentication for Git server?

I have a Git server, and I want to make it usable by all Kerberos-logged users. eg: if a user has a valid Kerberos ticket, she can start pushing to Git without having to provide any username/password. Is it even possible to do this with Git? All I…
Nicolas Raoul
  • 1,314
  • 7
  • 22
  • 43
0
votes
3 answers

can't login after generating keytab file

I generated a keytab file with the following command: ktpass /out http-web.keytab /mapuser Administrator@my.domain.bar /princ HTTP/localhost:8080@my.domain.bar /pass * However, now I can't seem to login as the Administrator using the same password…
birdy
  • 117
  • 5
0
votes
2 answers

F5 authentication using kerberos keytab

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone know if it is possible for the script to generate…
vs_sa
  • 61
  • 1
  • 5
1 2 3
…
75 76