Questions tagged [mit-kerberos]
78 questions
0
votes
1 answer
Kinit autentication does not create klist ticket
I´ve been trying to connect to a HDFS server protected by Kerberos for days.
I alterady have have Kerberos for windows installed here. And it shows me the valid/active ticket.
But as I run 'Klist' on prompt, I see no tickets
If I run Kinit on…

FábioRB
- 335
- 1
- 12
0
votes
1 answer
Where to find kerberos conf file in IIS server web application
I have a web application in IIS server and it is enabled for kerberos.
I want to change few settings like rdns and dns_canonicalize_hosname but I am not aware where to do it.
I can do it in a linux server in krb5.conf file. I cannot find any krb5…

Fatilearns
- 33
- 4
0
votes
1 answer
How to specify the location of the Key Distribution Center to Spring Security Kerberos?
I'm running an instance of the Kerby (MIT Kerberos Java implementation) on a Linux machine. I have a web application running on a Windows machine. The web application is secured using Spring Security Kerberos (following the steps described in this…

James
- 2,876
- 18
- 72
- 116
0
votes
1 answer
How does browser know which KDC to contact in kerberos?
I am new to Kerberos and I am not sure how browser knows which KDC to contact for ticket for a HTTP service?
For example, I have an application (SPNEGO) running on www.xyz.example.com and my realm is example.com ( I have a linux server as KDC…

Shivangi Bhardwaj
- 387
- 9
- 23
0
votes
1 answer
Where lies the error when compiling the current Kerberos version?
I am currently trying to compile version krb5-1.18.2 of MIT Kerberos. Unfortunately I come across an error which I cannot solve. I have already installed the group of developer tools via the repository of Oracle Linux 6. With the command ./configure…

FrankStein
- 85
- 13
0
votes
1 answer
Server not found in Kerberos database due to multiple DNS entries for single IP
There is a SharePoint which I'm accessing a file using REST API through Kerberos authentication , the problem is that the SharePoint where it is located has two DNS entries for a single IP, whenever it resolves to domain name 1, the API is getting…

Sai Chand M
- 13
- 6
0
votes
2 answers
KDC validation from TGS-REP
I have a question on validating the KDC from TGS-REP.
I have a legacy test tool written in c++ that validates the user's AD credentials. This test-tool invokes krb5 library methods for performing the authentication and runs on client (linux…

kee
- 46
- 2
- 10
0
votes
0 answers
Can we user Multiple UserGroupInformation (ugi) objects to authenticate with kerberized hadoop?
I need to authenticate two different HDFS cluster with different realms. But only one works fine when I instantiate another UGI object it gives the error
UserGroupInformation.setConfiguration(conf);
UserGroupInformation.loginUserFromKeytab(Principal…

UDIT JOSHI
- 1,298
- 12
- 26
0
votes
1 answer
Cloudera node /etc/krb5.conf replaced at every reboot
I have a question, why are my cloudera nodes replacing the file /etc/krb5.conf ata every reboot ?? Im trying to make modifications, and when someone issues a reboot the file is again replaced by the old config file

Flechoide
- 75
- 3
- 10
0
votes
1 answer
Kerberos Authentication in Oracle 12.2.0.1 with KERBEROS5PRE service and Cred Cache OSMSFT
I am trying to connect a web api that uses EntityFW and Oracle.ManagedDataAccess to an Oracle 12c (12.2.0.1)
I have to use Kerberos Authentication with following…

Supun De Silva
- 1,437
- 9
- 15
0
votes
1 answer
kadmin: Communication failure with server while initializing kadmin interface
I have one node kerberos setup. I am able to query kdc using kadmin.local but when I try querying using kadmin( kadmin -p admin/admin@xxx.xxx.xxx) it fails with error:
kadmin: Communication failure with server while initializing kadmin…

Santosh Kumar
- 761
- 5
- 28
0
votes
0 answers
What's the differnece between service principals and user principals?
I'm setting up a Kafka-cluster with kerberos, and the instructions/documentation is a little sparse when it comes to multi-node clusters (specifically the service principals.
What's the differnece between service principals and user principals…

james
- 21
- 2
0
votes
1 answer
kinit: Failed to store credentials: Bad format in credentials cache (filename: /tmp/krb5cc_651) while getting initial credentials
I have been trying to do kinit from client machine to KDC server to authenticate client
kinit -kt host.keytab -p host/mydomain.com@REALM.COM
but I am getting below error
kinit: Failed to store credentials: Bad format in credentials cache
…

JDP
- 56
- 2
- 10
0
votes
2 answers
kinit: krb5_init_creds_set_keytab: Failed to find keytab (unknown enctype)
So as to enable access to Kerberized Hadoop from a MacBook, tried creating SPNEGO. Post copying the spnego keytab from KDC in Centos 7, doing a kinit failed with the following error:
$kinit -kt /etc/security/keytabs/spnego.service.keytab…

Venkat
- 41
- 1
- 5
0
votes
1 answer
Oozie Spark access to hive with kerberos
When I execute a spark process in oozie I have the following error. The database not found.
2018-09-26 15:27:23,576 INFO [main] org.apache.spark.deploy.yarn.Client:
client token: Token { kind: YARN_CLIENT_TOKEN, service: }
diagnostics:…

Bar
- 129
- 1
- 1
- 8