Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1168 questions
0
votes
1 answer

Kerberos Password Change Web Interface Suggestions

Debian 6 MIT Kerberos i.e. krb5 We can change our Kerberos passwords by using kpasswd at the command line. We'd like to offer users the option to change their Kerberos passwords in a friendly web interface. Is there an existing web application or…
caleban
  • 1,116
  • 5
  • 18
  • 34
0
votes
1 answer

How to grant a kerberos ticket after successful imap authentication from dovecot

An interesting question, I hope. I am running a set of virtual machines under debian 6, to build a mail/collaboration server. I am mainly using dovecot, postfix, openldap and heimdal. Mails are stored using maildir, on a NFSv4 share. My users are…
Andre Rodier
  • 1
  • 2
0
votes
1 answer

exchange 2010 exchange management console, access denied. Time sync issue?

I installed Exchange 2010 on Windows Server 2008r2, my domain already has an Exchange 2007 organization present. During the Exchange 2010 installation, two errors occurred: Upon the hub transport role install, it failed with msexchangeadtopology…
Jeff
  • 1,089
  • 5
  • 26
  • 46
0
votes
2 answers

Create a linked SQL server across a domain

I am trying to create linked server on a SQL 2008 server to sql server on another domain. I tried following the advice given in this article: http://msdn.microsoft.com/en-us/library/ee191523%28v=sql.100%29.aspx about setting up Kerberos delegation…
Paul
  • 133
  • 1
  • 8
0
votes
2 answers

How can i get SSO for alfresco on windows-7 to work?

domain AD on windows 2008 R2, linux server alfresco 3.4c, windows-7 client. I'm trying to get automatically logged into alfresco from the windows-7 client. I've looked with wireshark to see what happens: 1. Client goes to /alfresco 2. Server sends…
Maarten
  • 11
  • 5
0
votes
2 answers

How can i get more user debug logging related to kerberos for alfresco?

I am running alfresco community edition 3.4c on a debian linux. I have problems getting the kerberos authentication in order. The biggest problem is that do not seem to have any sort of user logs. what i am using already: …
Maarten
  • 11
  • 5
0
votes
1 answer

How to manage ldap users/kerberos principals on Ubuntu server?

I've recently setup a small test network with an Ubuntu server and Ubuntu clients. People can login to a client machine using an account stored in LDAP (created using ldapadduser from the ldapscripts package). The problem has arisen when it came to…
danbishop
  • 15
  • 1
  • 4
0
votes
1 answer

kerberos security question

I don't know what the best practice for kerberos is with regards to security. I was wondering is it a good idea to allow a kerberos server to be public so public servers can use single-sign on or is it something that is only reserved for internal…
PHGamer
  • 430
  • 1
  • 4
  • 7
0
votes
2 answers

Automate setup of constrained kerberos delegation in AD

I have a web app that uses some backend servers (UNC, HTTP and SQL). To get this working I need to configure ServicePrincipalNames for the account running the IIS AppPool and then allow kerberos delegation to the backend services. I know how to…
Grhm
  • 293
  • 5
  • 16
0
votes
1 answer

kerberos error when active-directory user connects to Solaris machine

I have configured two CentOS machines to authenticate via kerberos and LDAP to Windows Server 2008 R2 Active Directory. I am now trying to do the same to a Solaris 10u9 (without upgrades to Kerberos or ldap) machine but am running into a problem --…
jamesbtate
  • 567
  • 2
  • 6
  • 14
0
votes
1 answer

Cross Forest Delegation

Is it possible to do delegation in a cross forest scenario with only a one way trust? I have 2 domains which are in different forests, and there is a one way trust from the resourcedomain to the userdomain. The SPN's are registered properly on the…
user59052
0
votes
2 answers

kerberos instead of http over ssl

If I want to use kerberos instead of https (http over ssl) how do I make sure data is not tampered or read in the transit?
kalyan
  • 195
  • 2
  • 7
0
votes
1 answer

MAC 10.4.11 & Win2k8

I am attempting to use a Mac Xserve running 10.4.11 to access a file share on a Win2k8 machine, but it's failing due to Kerberos authentication errors. Any ideas how to fix/update a Mac? As an aside, this is the first Mac I've dealt with in 20…
user7862
  • 178
  • 3
  • 5
  • 10
0
votes
2 answers

Event ID 4 Kerberos

Help! I screwed up big time. While trying to obtain the kerberos keys so i could decode some kerberos packets with wireshark, I inadvertently changed some internal passwords and I have no idea how to fix it. I am keenly aware of how stupid this…
Erik Funkenbusch
  • 600
  • 10
  • 27
0
votes
1 answer

How to configure AAMs in SP 2010 to work with ISA 2006 and Kerberos authentication?

We are attempting to set up SharePoint Foundation to use Kerberos constrained delegation with ISA Server 2006. My current issue is that the alternate access mappings are not working properly. Issues: None of the drop down menus and other dialogs…
Robert Kaucher
  • 487
  • 1
  • 4
  • 18
1 2 3
…
77 78