Stack Overflow
Stack Overflow

Questions tagged [kerberos]

Kerberos is a single sign-on (SSO) network authentication protocol designed to allow nodes, communicating over a non-secure network, to prove their identity to one another in a secure manner.

Kerberos is a single sign-on (SSO) network authentication protocol which uses symmetric cryptography and is defined in RFC 4120. Its design is based on usage of a trusted third-party (the key distribution center "KDC") which allows IP hosts to communicate over a non-secure network to prove their identity to one another in a secure manner. The PKINIT extension (RFC 4556) adds support for public-key cryptography.

Kerberos authentication in web browsers and HTTP clients is supported via the SPNEGO mechanism (RFC 4559). In other software, the GSS-API (RFC 4121) interface is commonly used to perform Kerberos authentication.

Kerberos supports one-time password (OTP) tokens for multi-factor authentication (RFC 6560).

See the Wikipedia article for more information.

3522 questions
1
vote
1 answer

use WindowsIdentity/WindowsPrincipal to get SAML token for WS-Federation

Is there a way to use the native WindowsIdentity/WindowsPrincipal inside of a C# application running on a corporate domain to be able to request a SAML token from the domain's ADFS server so that the C# application can then make subsequent calls to…
Brian
  • 1,675
  • 3
  • 19
  • 29
1
vote
2 answers

Performance difference Kerberos versus NTLM

I understand that Kerberos has better performance than NTLM. But does anyone have any figures or any experience of how much better it is?
Shiraz Bhaiji
  • 64,065
  • 34
  • 143
  • 252
1
vote
2 answers

MacOS Sierra & Kerberos

I am running MacOs High Sierra 10.13 I need to remotely access a kerberised web UI (Hadoop Cluster / Ambari / Oozie Service UI to be specific) For that I first need to edit/configure the kerberos conf file to add the realm before calling kinit…
Mehdi LAMRANI
  • 11,289
  • 14
  • 88
  • 130
1
vote
1 answer

Soapclient and the transfer of user Kerberos authentication

I am consuming services through Soapclient with a Kerberos authentication. A website is hosted in Server A and accessed through Kerberos authentication and web services is hosted in Server B and again accessed through Kerberos authentication. Web…
geosom
  • 36
  • 1
  • 5
1
vote
1 answer

How to logon a user on a server and run a process given a Kerberos Ticket

How does authentication and logon work on Windows with Kerberos? What I want to achieve is to logon a user on a server and run a process for that user. As a first step, I create a Kerberos ticket on the client and send it to the server. On the…
Spiegelritter
  • 806
  • 1
  • 7
  • 16
1
vote
0 answers

Apache Nifi publish to Kafka 0.10 with SASL failing

I am trying to publish data from Nifi 1.7.1 to Kafka 0.10 via SASL_Plaintext. We already tested that Kafka Brokers are available and receiving on our topic via Commandline on the Kafka Server. Still the PublishKafka_0_10 fails with the following…
jugi
  • 622
  • 7
  • 15
1
vote
1 answer

Kerberos requesting for password after generating TGT

I have followed the below steps to set up the Kerberos server for centos. Inserted valid fqdn in /etc/hosts file. Changed realm name in /var/kerberos/krb5kdc/kdc.conf Changed realm name in /var/kerberos/krb5kdc/kadm5.acl Configured…
Shubham Hasija
  • 11
  • 4
1
vote
1 answer

warning when enabling Kerberos on Hadoop

I am wanting to enable Kerberos on a Hadoop 2.5 cluster that has data in it we want to keep. Going into the Kerberos wizard in Ambari it warns: YARN log and local dir will be deleted and ResourceManager will be formatted... Will this harm the data…
simbo1905
  • 6,321
  • 5
  • 58
  • 86
1
vote
1 answer

Java Hbase Rest Client with Kerberos Authentication

I am trying to connect use Java HBase Rest Client to connect to my Hbase Server and it's showing authentication error. If I use the connection object and use scanner API, I can retrive the data, However not sure How to do this with Rest…
Gaurang Shah
  • 11,764
  • 9
  • 74
  • 137
1
vote
1 answer

Authorizing AD Group\User With HttpClient

I'm getting a 401 error whenever I attempt to get a response from HttpClient when I turn off Anonymous Authentication. StatusCode: 401, ReasonPhrase: 'Unauthorized', Version: 1.1, Content: System.Net.Http.StreamContent, Headers: { …
Parrish Husband
  • 3,148
  • 18
  • 40
1
vote
1 answer

CXF - How to properly configure Spnego with CXF 3.2.6

I'm trying to do create a CXF soap web service client to make soap calls with a Kerberos authenticated SharePoint instance. I import the following:…
Nicholas DiPiazza
  • 10,029
  • 11
  • 83
  • 152
1
vote
0 answers

SSRS 2017 Scaleout adding/editing Data Source issue in Chrome

I have setup SSRS 2017 Scaleout environment with two nodes and a load balancer. Users can login fine with both IE and Chrome but editing Data Sources works in IE but not in Chrome. Details below. Here are the high level Installation/Configuration…
Afroz
  • 1,017
  • 2
  • 12
  • 24
1
vote
1 answer

Kerberos Token asks to be called again to complete the context

I am attempting to obtain a Kerberos Token from a C# Application (not web-based, a standalone executable). I have referred to this question to figure out how to do it, but even trying both answers, I get the same problem. When I reach the GetToken…
Kaito Kid
  • 983
  • 4
  • 15
  • 34
1
vote
1 answer

How to do authentication with Kerberos in Jupyter notebook

I am using Jupyter Notebook on my Cloudera cluster, need to read data from hdfs. As the cluster is Kerberized so I need to get authenticated with my keytab, I ran the command inside my notebook: kinit -kt keytab principal no problem and I can see…
Choix
  • 555
  • 1
  • 12
  • 28
1
vote
1 answer

Klist error: Bad format in credentials cache

I am seeing the following error when inspecting a newly created keytab: [rxie@cedgedev02 ~]$ klist rxie.keytab klist: Bad format in credentials cache (filename: rxie.keytab) [rxie@cedgedev02 ~]$ kinit -kt rxie.keytab kinit: Cannot determine …
Choix
  • 555
  • 1
  • 12
  • 28
1 2 3
…
99 100