Questions tagged [gssapi]

GSS-API is an IETF standard that addresses the problem of many similar but incompatible security services in use today.

Generic Security Service Application Program Interface () provides vendor-neutral authentication services to callers in a generic fashion, supportable with a range of underlying mechanisms and technologies and hence allowing source-level portability of applications to different environments.

Commonly-used negotiation mechanisms include and during transactions between client and server.

GSSAPI is defined in RFC 2743.

274 questions
0
votes
0 answers

how to connect java swing application to mariadb DB using GSSAPI?

I have an application, which needs to connect to MariaDB DB version 10.1 using GSSAPI. I have enabled the GSSAPI plugin on the database side, and have created a user via - create user 'user'@'%' IDENTIFIED via 'gssapi' as 'user'; Now, i am…
0
votes
0 answers

Setting up Spring Security Kerberos - spn and keytab

I'm trying to get the sample spring security kerberos application running, before I try and integrate it into my actual application. This is the app I'm running:…
Martin Cassidy
  • 686
  • 1
  • 9
  • 28
0
votes
1 answer

security hole in GSSContext acceptSecContext method? (JAVA)

When the service ticket generated by the client is sent to the server, GSSContext acceptSecContext method is to decode the such ticket that was encoded by the KDC. when this method is called with the service ticket as its parameter, is the ticket…
Alison Aftra
  • 63
  • 1
  • 9
0
votes
1 answer

gssapi error - when using webhdfs in fluentd

As part of our centralised logging, I am sending fluentd output to HDFS (which is Kerberised) using webhdfs plugin. I am getting gssapi library not found error This is how my td-config output section looks like # Output type…
Muj33b
  • 1
  • 2
0
votes
1 answer

JNDI search not working after GSSAPI (Authenticate with Kerberos)

I got below example from internet to test GSSAPI with JNDI. public class GssExample { public static void main(String[] args) { System.setProperty("java.security.auth.login.config", "C:\\gssapi_jaas.conf"); …
SimpleGuy
  • 2,764
  • 5
  • 28
  • 45
0
votes
2 answers

How to authenticate in LDAP server using keytab

Is there a possible way to create LdapContext using keytab file instead of directly providing credentials? So let's assume that I currently have such piece of code Hashtable env=new…
Alexey
  • 2,388
  • 1
  • 16
  • 32
0
votes
1 answer

Kerberos, unable to use S4U2Self and S4U2Proxy extensions with MIT KDC Server

Below is my scenario: Client is connecting to intermediate service and intermediate service is connecting to the target service. I want to use the client credentials from the intermediate service to connect to the target service. I used the below…
0
votes
1 answer

Windows client application using GSSAPI/Kerberos API to authenticate through KDC

Sorry for my question if it's obvious but I came from developing in the embedded world. I m trying to develop a simple windows application in c/c++ to authenticate through KDC using either GSSAPI or Kerberos API directly. The assumption is the KDC…
tykt77
  • 11
  • 1
  • 3
0
votes
1 answer

MySQL gssapi plugin groans and moans when doing mysql_install_db as non-root

I'm running Fedora 24 and have MariaDB 15.1 Distrib 10.1.24-MariaDB 64-bit installed. I'm a non-root user, and I want to set up a DB of my own. So, I followed the instructions in the answers to: Mysql without root privilege When I execute…
einpoklum
  • 118,144
  • 57
  • 340
  • 684
0
votes
1 answer

SingleSignOn with cURL on Linux connected to Windows Server 2012

I am developing a cross-platform application which will connect to proxy server running on Windows server 2012. The credentials to access proxy server will be the system credentials so that user doesn't have to enter the credentials manually. I have…
cbinder
  • 2,388
  • 2
  • 21
  • 36
0
votes
3 answers

Java client and Kerberos / SSO - Krb5LoginModule - not re-using tickets

I'm running JMeter which depends on JDK 1.8's Krb5LoginModule. It seems to me that the Krb5LoginModule can't maintain a kerberos session across multiple requests. This results in a HTTP 401 and renewed handshaking before every request. I'm trying…
Adam
  • 5,215
  • 5
  • 51
  • 90
0
votes
0 answers

javamail authenticator not work

here is my configuration to send a mail to my smtp server but it's not use session authenticator and force me to enter credential from console and when I enter them from console it successfully send mail, which part of my configuration is wrong. …
badger
  • 2,908
  • 1
  • 13
  • 32
0
votes
1 answer

Spring LDAP GSS-API

I am trying to connect to AD using Spring LDAP. I am able to connect to a server with Simple Authentication but for one of the server only GSS-API authentication is active. I am not able to connect to this server using Spring LDAP. Could someone…
0
votes
1 answer

How can I make SPNEGO working with mod_auth_kerb?

here is my problem: Context: kerberos authentication for two kinds of webapps, one using Apache mod_auth_kerb and the other using SPNEGO (GSSAPI) for Tomcat. I use mod_jk for connecting Tomcat to Apache. Problem: kerberos headers from client Tomcat…
BigMac
  • 39
  • 6
0
votes
2 answers

WildFly 10.1 Load Balancer + Kerberos/SPNEGO

How can I add SPNEGO authentication to a WildFly 10.1 load balancer? Background: All nodes are running on Windows. The nodes themselves are running on WildFly 8.2.1 (because the application is tight to it) in a Wildfly 8.2.1 domain The load…
Maddin
  • 957
  • 1
  • 11
  • 21