Stack Overflow
Stack Overflow

Questions tagged [kerberos]

Kerberos is a single sign-on (SSO) network authentication protocol designed to allow nodes, communicating over a non-secure network, to prove their identity to one another in a secure manner.

Kerberos is a single sign-on (SSO) network authentication protocol which uses symmetric cryptography and is defined in RFC 4120. Its design is based on usage of a trusted third-party (the key distribution center "KDC") which allows IP hosts to communicate over a non-secure network to prove their identity to one another in a secure manner. The PKINIT extension (RFC 4556) adds support for public-key cryptography.

Kerberos authentication in web browsers and HTTP clients is supported via the SPNEGO mechanism (RFC 4559). In other software, the GSS-API (RFC 4121) interface is commonly used to perform Kerberos authentication.

Kerberos supports one-time password (OTP) tokens for multi-factor authentication (RFC 6560).

See the Wikipedia article for more information.

3522 questions
1
vote
0 answers

GSS initiate failed when trying to open jdbc connection from java to hive

I am trying to open jdbc connection from java app when running on windows pc. Hive is already installed on a oracle linux server. I am using kerberos for secure authentication. I took ticket using the keytab when keytab run on linux server. It…
neverwinter
  • 810
  • 2
  • 15
  • 42
1
vote
1 answer

Cannot connect locally to hdfs kerberized cluster using IntelliJ

Iam trying to connect to hdfs locally via intelliJ installed on my laptop.The cluster I'am trying to connect to is Kerberized with an edge node. I generated a keytab for the edge node and configured that in the code below. Iam able to login to the…
Carol
  • 347
  • 5
  • 17
1
vote
3 answers

Permanent Kerberos tickets for interactive users of Hadoop cluster

I have a Hadoop cluster which uses the company's Active Directory as Kerberos realm. The nodes, and the end-user Linux workstations are all Ubuntu 16.04. They are joined to the same domain using PowerBroker PBIS, so SSH logons between the…
Isac Casapu
  • 1,163
  • 13
  • 21
1
vote
1 answer

Python Vertica: How to use Kerberos authentication with vertica-python module?

I am using Uber's vertica-python native python adaptor (https://github.com/uber/vertica-python), and I am trying to integrate kerberos authentication with it. Is there a way I can do it? Problem: The database user I want to use with my script has…
dr_dino
  • 115
  • 1
  • 2
  • 7
1
vote
1 answer

WCF: Passing Kerboros token via HTTP call instead of HTTPS

I want to pass Kerberos token via HTTP call to a server using WCF. I have a piece of code that successfully does this. But it only works if I make a request to HTTPS URI. var httpBinding = new WebHttpBinding(WebHttpSecurityMode.Transport) {…
Kevin
  • 5,972
  • 17
  • 63
  • 87
1
vote
0 answers

Connectivity issue with Kerberized HBase via Java application running outside HDP Cluster

We have a java application running on the Liberty IBM WebSphere server and trying to connect to the HBase on the HDP cluster to persist some data. Now we are facing issues to connect to HBase(kerberized) on HDP cluster. We have been able to…
Puneet Babbar
  • 105
  • 1
  • 1
  • 7
1
vote
1 answer

Kerberos library is not installed

I have a simple project to test Kerberos authentication. This is a Windows machine. In my package.json: "dependencies": { "kerberos": "^0.0.24", "mongodb": "^3.0.10" } Connection URL: const url =…
Alex Polkhovsky
  • 3,340
  • 5
  • 29
  • 37
1
vote
2 answers

Securing Kafka and Zookeeper with Kerberos

I'm trying to setup a kerberos identification between zookeeper and kafka. I have followed the configuration steps available here : https://docs.confluent.io/4.1.1/kafka/authentication_sasl_gssapi.html#sasl-gssapi-broker. The kafka brokers…
vespasien
  • 183
  • 1
  • 1
  • 9
1
vote
1 answer

Storing parquet to Kerberos secured Webhdfs from Spark

I'm writing to a webhdfs path, secured by Kerberos, from Spark. And part of it is actually working, but it breaks down when writing parquet files to the (web)hdfs location. The authentication & authorization work and the script creates the path…
Tom Lous
  • 2,819
  • 2
  • 25
  • 46
1
vote
0 answers

RCurl Post not working with kerberos authentication and SSL

POST request with a json body. Response back is also in json. Without kerberos authentication, it is working. But its failing when I enable kerberos with SSL. The server logs show no issue, handshake is successful and server shows 200 response…
user236215
  • 7,278
  • 23
  • 59
  • 87
1
vote
0 answers

Waffle Java Client: How to use a specific domain user to authenticate against a web service

The short version: I have a Tomcat hosted Java Spring app and am trying to access a local OData web service that uses Kerberos/NTLM authentication. The app calls the web service automatically on a schedule. As such I have no logged in user. My…
Jon C
  • 306
  • 1
  • 4
  • 10
1
vote
0 answers

Getting GSSException: Defective token detected error while calling HDFS API on a kerberised cluster

I have a kerberised CDH v5.14 cluster with 3 nodes.I trying to call the HDFS API using python as below baseurl = "http://:50070/webhdfs/v1/prod/?op=LISTSTATUS" __, krb_context =…
Vishant
  • 266
  • 5
  • 16
1
vote
0 answers

Weblogic client gets a 401 Unauthorized Kerberos exception but my main class does not, Do you know why?

I have an application running as a weblogic startup class. When it gets to the point where it has to request a service from my application that is setup with Kerberos Service Principal I get a 401 Unauthorized exception (As seen below). When I run…
SandMan
  • 555
  • 2
  • 6
  • 15
1
vote
1 answer

Switching application to use Constraint based kerberos

I have an old application that we setup with delegation based kerberos. Everything with the application worked fine till we tried it out on one of our new Windows 10 machines. After awhile, we finally figured out that Credential guard is not playing…
Lareau
  • 1,982
  • 1
  • 26
  • 47
1
vote
1 answer

Can you use a keytab generated on Windows from Linux?

I am on Linux and I have a java web application container setup with kerberos. I need this java web application container setup so that it can authenticate with an IIS server protected by siteminder + kerberos. So on Windows, I have generated a…
Nicholas DiPiazza
  • 10,029
  • 11
  • 83
  • 152
1 2 3
…
99
100