Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [kerberos]

Kerberos is a computer network authentication protocol, which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication — both the user and the server verify each other's identity.

As many vendors have their own implementation of Kerberos, configuration details for each implementation is likely to vary. Here are some links that may help those troubleshooting Kerberos on commonly used paltforms.

1168 questions
0
votes
1 answer

db2 SQL30082N error

We're using db2 9.5 and on rare occasions get the following error when attempting to connect to the database. The program is forked from another process and trying a second time always succeeds. [IBM][CLI Driver] SQL30082N Attempt to establish…
brianegge
  • 1,064
  • 2
  • 14
  • 23
0
votes
2 answers

What should I use for mixed environment authentication + SSO?

Our company runs mostly linux server but mostly windows clients. I'm looking for a solution that would allow all of our web applications to have a login portal (and once you're logged in you don't have to log into the next application) plus have the…
edude05
  • 321
  • 2
  • 7
  • 14
0
votes
2 answers

using windows startup script to copy files/folders from network share

I'm having an issue running xcopy as part of a startup script. The server operating system is Windows 2008 R2 and the client operating system is Windows XP SP3. File server hostname: filesrv1 DNS Alias (CNAME): filesrv The command being executed…
another_netadmin
  • 93
  • 7
0
votes
2 answers

Kerberos SSO browser integration?

I'm installing a bunch of web apps for the office, and one of the wants would be Kerberos-managed SSO. Now, I have found some information on the matter, and I wondered, what browsers integrate Kerberos SSO? Of course I could just use the underlying…
Olivier Tremblay
  • 347
  • 3
  • 16
0
votes
1 answer

Cannot delete files on samba share when authenticated using kerberos

I have a samba server that authenticates users using LDAP, however it does have kerberos enabled as well. Unfortunately users authenticated using kerberos cannot delete files. I can test this using smbclient - if I use the '-k' switch, I cannot…
ondra
  • 424
  • 4
  • 10
0
votes
1 answer

Refresh kerberos ticket instead of prompting for pam password

Using centralised auth against FreeIPA is working great. In order to use Kerberos SSO when using ssh, scp etc from jumphosts users must initiate their Kerberos tickets first with kinit. I've added this to bashrc for users so that they're prompted…
dmgeurts
  • 13
  • 4
0
votes
0 answers

Multiple Kerberos Providers in Keycloak

I have a Keycloak with 2 different LDAP Providers which include Kerberos Authentication. Provider A is on first priority, provider B on second priority. Both provider settings provide their different kerberos realm. We are talking about two ADs with…
Lithilion
  • 131
  • 4
0
votes
1 answer

What's wrong with my nagios kdc configuration?

I want to setup a service to check the kdc with nagios. With my kdc (samba4) I create the user using this script #!/bin/bash USER=nagioskerberos DOMAIN=myhost.priv SERVICE=nagioskerberos FQDN=nagios1.myhost.priv samba-tool user delete…
elbarna
  • 332
  • 3
  • 6
  • 15
0
votes
1 answer

multiple LDAP and krbtgt tickets generated

I was doing some testing to understand Kerberos behavior, I have a user Alice logged into a machine part of lab.local domain, after sign in, I run net user \dc\sysvol to trigger service ticket request for the cifs service, as per my understanding…
Basem
  • 3
  • 1
0
votes
1 answer

Server 2019 Domain Controller SMBclient cannot map NetApp Drives

I am supporting Windows again after many years. This client I'm assigned to has Domain Controllers running 2008r2 and 2012r2 and they want Azure AD Connect Password Hash Sync. The minimum requirement for this is a functional level of 2016. I…
D.Fitz
  • 162
  • 1
  • 8
0
votes
1 answer

Invalidate all Kerberos Tickets of a Domain User

I deactivated an active directory domain user and logged off his computer. I am not sure, maybe he is logged on anywhere else (some switch, router,..) so i was curious if it is possible to invalidate his kerberos ticket so all sessions will…
mbrain
  • 3
  • 3
0
votes
1 answer

Start multiple dependent daemons in one systemd service

I set up a FreeRADIUS server with a SQL backend running on a remote MariaDB instance. Authentication and traffic encryption should be handled by Kerberos using k5start to maintain the tickets. The system runs on a Debian 11 instance. I created an…
Lars Hanke
  • 285
  • 3
  • 16
0
votes
0 answers

Failed to parse SPNEGO request

So I wanted to experiment with this smbprotocol in local docker (compose) network controlled environment and in all my attempts, I've been able to solve a lot of issues that always seem to return me to this issue. Here is my…
toonday
  • 101
  • 1
0
votes
1 answer

pgadmin4 using kerberos authentication returns error "Kerberos authentication failed. Couldn't find kerberos ticket"

My environment: MIT Kerberos server on Red Hat 8.8 PostgreSQL server v15.3 on Red Hat 8.8 PostgreSQL client v15.3 on Ubuntu 22.04 Desktop I have configured PostgreSQL server to use Kerberos. On my Ubuntu Desktop where PostgreSQL client is…
folow
  • 101
  • 2
0
votes
0 answers

Setup kerberos with nfsv4 for no_root_squash mounts

I am very new to kerberos and nfs. Kindly help to know if this is feasible. The NFS server is Truenas scale and client is ubuntu 22.04 desktop. nfs v4 is enabled in Truenas server and exports /export/home as no_root_squash and sec=krb5 The…
tachy
  • 13
  • 2
1 2 3
…
77 78