Questions tagged [gssapi]
53 questions
0
votes
2 answers
Add member to kerberos domain programatically
I want to have an embedded device join a Linux based AD/DC domain. I have kerberos libraries (no executables) on the embedded device. I have an application on the embedded device that can successfully authenticate and access services on the domain…
Richard Schmitt
- 1
- 3
0
votes
0 answers
gss_add_oid_set_member() failed for [ntlmssp]
I has installed gssntlmssp (on centos7) but when I specify it in gssapi as GssapiBasicAuthMech or GssapiAllowedMech, gssapi behaves as if in wasn't installed at all (gss_add_oid_set_member() failed for [ntlmssp])
here ntlmssp.conf:
# NTLMSSP…
0
votes
0 answers
Fail2Ban filter for Apache GSSAPI module
Does someone know if there is a Fail2Ban filter for Apache GSSAPI Module Authentication (mod_auth_gssapi)?
The Fail2Ban "apache-auth.conf" filter seems not working for this kind of authentication.
Thanks in advance
Fabio S
- 101
- 2
0
votes
0 answers
RHEL8 and GSSAPI Kerberos authenticate through Apache issue
I'm trying to run an apache virtualhost, on a machine currently running Red Hat Enterprise Linux release 8.5 (Ootpa), with Kerberos authentication using the new GSSAPI module (replacement of mod_auth_kerb).
I also configured LDAP directives to…
Wrest
- 11
- 1
- 3
0
votes
1 answer
Getting javax.naming.CommunicationException: Connection reset and AD "event ID 1216" while trying to perform LDAP search using JNDI and GSSAPI
I am trying to analyze the reason for exceptions/ failures during the Ldap search. I am performing operations using JNDI on Active directory domain controller.
Here is the background for the things that I am trying to do:
Using SASL (Kerberos…
theimpatientcoder
- 121
- 3
0
votes
2 answers
Can't determine the principal used to LDAP syncrepl GSSAPI
I've configured two openldap fully functional in HA (syncrepl mode provider - slave).
After testing that simple bind syncrepl works flawlessly, I'm trying to deploy from scratch using only GSSAPI to avoid the use of plain text passwords.
I've…
DG DM
- 35
- 5
0
votes
1 answer
Azure ADDS and GSSAPI
How can I configure Azure AD Domain Services to support GSS negotiation?
I see that in the on-premises AD it can be configured to "Require signature" to negotiate the authentication mechanism, but for Azure ADDS I can't locate any documentation…
JayBee
- 11
- 1
0
votes
1 answer
Single sign on using SSSD against OpenLDAP server with Kerberos SASL/GSSAPI
Authentication against Kerberos and authorization against an LDAP directory is working for me. Now I'm looking for the client setup on Debian Buster using sssd.
I started with LDAP authentication with nss-pam-ldapd using SASL Proxy Authorization on…
Ingo
- 416
- 5
- 13