Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1136 questions
-1
votes
1 answer

Track down source of event 4771: Kerberos pre-authentication failed

Some process on a remote server is generating failed log-on attempts for a specific user account. I want to know what process it is. The account in question started generating these bad password attempts (4771, Failure code: 0x18) immediately after…
mwolfe02
  • 193
  • 1
  • 1
  • 12
-1
votes
1 answer

Lightweight webserver with SSPI authentification

I'm looking for a fast, lightweight web server (for example nginx or lighttpd) which supports authentication to a Microsoft Kerberos authentication server (SSPI). This webserver must run under Windows and Linux. There is a nice module for the Apache…
Fabian Horlacher
  • 143
  • 1
  • 9
-1
votes
1 answer

Setup kerberos on windows 7

I am developping a java web application application for a client which use kerberos spnego to authenticate its user. Kerberos itself is "plugged" to a LDAP They send me a documentation with what to put in my web.xml to get the authenticated user in…
jpprade
  • 103
  • 2
-1
votes
1 answer

Why there are three rounds of message exchanges for integrated windows authentication for IE

According to the result monitored by fiddler, there are totally 3 handshakes for integrated windows authentication for IE. GET /home - 401 Unauthorized WWW-Authenticate: Negotiate, NTLM GET /home Authorization: Negotiate UYTYGHGYKHKJPPP-=== - 401…
user197658
  • 1
  • 1
-1
votes
2 answers

RDP in 2008 R2 domain no longer working - possible Kerberos issue

Everything was working fine and no changes were made. For no apparent reason, we can no longer RDP to any domain computers except for the domain controllers themselves. This includes Windows 7 clients and non-controller 2008 R2 servers. After…
VokinLoksar
  • 121
  • 1
  • 8
-1
votes
2 answers

How to find out domain name for Win 2k8 server

I'm following this blog post: http://blog.springsource.com/2009/09/28/spring-security-kerberos/ It says: For this to work, every web applications needs to be registered at the Kerberos server and gets a service prinicipal and a shared secret …
birdy
  • 117
  • 5
-1
votes
1 answer

krbtgt password reset failed : no kerberos tickets

Big issue since krbtgt passord changed. I followed this procedure : https://docs.microsoft.com/fr-fr/windows-server/identity/ad-ds/manage/ad-forest-recovery-resetting-the-krbtgt-password Yesterday, i changed password (with active directory user and…
Alex Lum
  • 125
  • 1
  • 4
  • 13
-2
votes
2 answers

How to identify that the protocol is using by AD DC is Kerberous?

I have created a local environment as follows:- DC:- Windows server 2008
Client:- Windows 7
Domain:- januapp.local Now I read on somewhere that, the DC uses two types of Protocol for Authentication. 1.NTLM2.Kerberous Now when I type…
Utkarsh Agrawal
  • 19
  • 3
-2
votes
3 answers

Ubuntu software stack to mimic Active Directory auth

I'm going to have an Ubuntu 11.10 box in a customer's data center running a custom webapp. The customer will not have ssh access to the box, but will need authentication and authorization to access the webapp. The customer needs to have the option…
Eli Stevens
  • 223
  • 2
  • 7
-3
votes
1 answer

klist -li 0x3e7 help needed

Trying to renew computer group membership without restarting by issuing klist -li 0x3e7 from an elevated command prompt, but it's not working. Klist returns tickets flushed, but a gpresult still shows the old group memberships.
user423787
  • 1
  • 1
-4
votes
1 answer

Implementing Kerberos Authentication on Linux servers using script

My client wants to implement Kerberos Authentication on multiple Oracle Linux Boxes. Do they need to be done manually or can I implement on all of them using any script? Is there any way to script this and enable the authentication on all the…
Pallab
  • 115
  • 2
1 2 3
…
75
76