Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1168 questions
0
votes
2 answers

Connecting to SharePoint 2010 From the Internet (Keep being prompted for my Username & Password)

I installed Sharepoint Server 2010 on a domain controller but when I want to connect to my team site or my document workspace through the internet it keeps prompting me to enter my username and password. I'm using Windows Server 2008 R2, I have an…
user189756
  • 103
  • 3
0
votes
1 answer

Unable to install Kerberos libriaries using $ rpm -ivf krb5-libs-1.8.4-3.fc14.x86_64.rpm

My Linux version is as follows:Red Hat Enterprise Linux Server release 5.5 (Tikanga) My rpm version is 4.4.2.3 when I am trying ti run uname -a ,the output i sas follows: Linux ca1vmprdpsoft1.kla-tencor.com 2.6.18-194.el5 #1 SMP Tue Mar 16 21:52:39…
gayatri
  • 1
0
votes
2 answers

Kerberos unknown code krb 147, failed to verify krb5 credentials with LikeWise Open

I've followed this guide to get Apache Single-Sign-On to work, but so far all I get is strange kerberos errors. http://www.likewise.com/resources/documentation_library/manuals/open/likewise-open-guide.html#apachesso This is my current…
Lars
  • 578
  • 2
  • 8
  • 18
0
votes
3 answers

Get Kerberos ticket with SSH

I'd like to get a Kerberos 5 ticket when ssh-ing to get to a fully-automated login solution. Typically, you use kinit first and then ssh: > kinit user@DOMAIN user@DOMAIN's Password: (enter password) > ssh user@host (successful login) I'd like to…
Joel
  • 101
  • 1
  • 3
0
votes
2 answers

Setting up kerberos for SQL Server 2008 R2 not taking effect

I am trying to configure Kerberos for my SQL Server (the database engine domain account). I have executed the following command: SETSPN -A MSSQLSvc/MyDBServer:1433 MyDomain\SQLServerService Replacing MyDBServer with the FQDN of the server and…
GurdeepS
  • 1,646
  • 5
  • 26
  • 33
0
votes
1 answer

Sorting out delegation

I'm trying to sort out Windows Auth delegation for an IIS box talking to a SQL box, which should be passing through the users credentials. I've detailed the configuration of this double-hop scenario and the configuration below: Issue…
Overflew
  • 101
  • 1
0
votes
1 answer

Error on trying to ssh to a prgmr box when using PuTTY like utility KiTTY

I recently got a box on prgmr. Excited, I tried to login using my username password in KiTTY (which is basically an improved PuTTY) and got the following error, shown in the screenshot. Now, I can connect fine when using a Linux terminal. The…
detj
  • 103
  • 3
0
votes
1 answer

How do I grant a user permission to use Hadoop via Kerberos?

I've setup Hadoop to use Kerberos (following the Cloudera security guide), but it is unclear how I connect to hadoop with regular users (e.g. username=myuser). Currently I have myself authenticated with Kerberos with my Keberos admin user (via…
Dolan Antenucci
  • 329
  • 1
  • 4
  • 16
0
votes
1 answer

RSH connection problem while running MPI program

I'm trying to run MPI programs on 8 machines, but I get the error connect to address 127.0.0.1 port 544: Connection refused Trying krb4 rsh... connect to address 127.0.0.1 port 544: Connection refused trying normal rsh (/usr/bin/rsh) lagrid02:…
kashyapa
  • 337
  • 4
  • 17
0
votes
1 answer

Sudden catastrophic failure of kerberos

I've been playing with my openAFS setup, and adding keys for the afs principle for kerberos. Now, suddenly, Kerberos has gone down (or something). Kadmin gives the following error: kadmin -p admin Authenticating as principal admin with…
pypmannetjies
  • 129
  • 6
0
votes
2 answers

heimdal kerberos heterogeneous network

which is possible (or both) heimdal or kerberos for heterogeneous network login ie unix kdc running MIT kerberos or heimdal clients (services) to kdc bsd/linux client (to authenticate to services examples authenticate or ssh) windows/bsd/linux of…
rev
  • 113
  • 1
  • 8
0
votes
2 answers

Domain authentication used for kerberos based authentication of users on my server

Suppose a user process has authenticated itself against domain's directory server via kerberos, and then attempts opens a network socket to my server application. My server application has a white-list of users from the domain directory server. How…
Hawkeye
  • 2,699
  • 9
  • 30
  • 35
0
votes
2 answers

Mac OS X Server Secure Log full of failed SSH attempts

Whenever one of our server's admins tries to access our machine running Mac OS X Server 10.5 via SSH, I get the following error exactly every 10 seconds in the security log: sshd[32575]: /etc/sshd_config line 70: Unsupported option…
Zach Esposito
  • 103
  • 4
0
votes
1 answer

Changing the text of the kerberos passwd prompt

We are running kerberos (krb5-1.7) on SLES 11 SP1. Our users seem to have trouble changing their passwords with the password command. They are confused by the initial prompt, and don't understand that it is first asking to "enter your current…
Banjer
  • 3,974
  • 12
  • 41
  • 47
0
votes
1 answer

AD + Postfix + Dovecot problems with query_filter

I set up a mail server AD + Postfix + Dovecot + Kerberos This works fine for only one domain In the attribute mail=test@test.com, in otherMailbox=vasya@otherdoamin.com,petya@another.net Config files: Postfix ldap-users.cf server_host =…
Ross
  • 1
  • 1
1 2 3
…
77 78