Questions tagged [mit-kerberos]

78 questions
0
votes
1 answer

Kinit autentication does not create klist ticket

I´ve been trying to connect to a HDFS server protected by Kerberos for days. I alterady have have Kerberos for windows installed here. And it shows me the valid/active ticket. But as I run 'Klist' on prompt, I see no tickets If I run Kinit on…
FábioRB
  • 335
  • 1
  • 12
0
votes
1 answer

Where to find kerberos conf file in IIS server web application

I have a web application in IIS server and it is enabled for kerberos. I want to change few settings like rdns and dns_canonicalize_hosname but I am not aware where to do it. I can do it in a linux server in krb5.conf file. I cannot find any krb5…
Fatilearns
  • 33
  • 4
0
votes
1 answer

How to specify the location of the Key Distribution Center to Spring Security Kerberos?

I'm running an instance of the Kerby (MIT Kerberos Java implementation) on a Linux machine. I have a web application running on a Windows machine. The web application is secured using Spring Security Kerberos (following the steps described in this…
James
  • 2,876
  • 18
  • 72
  • 116
0
votes
1 answer

How does browser know which KDC to contact in kerberos?

I am new to Kerberos and I am not sure how browser knows which KDC to contact for ticket for a HTTP service? For example, I have an application (SPNEGO) running on www.xyz.example.com and my realm is example.com ( I have a linux server as KDC…
0
votes
1 answer

Where lies the error when compiling the current Kerberos version?

I am currently trying to compile version krb5-1.18.2 of MIT Kerberos. Unfortunately I come across an error which I cannot solve. I have already installed the group of developer tools via the repository of Oracle Linux 6. With the command ./configure…
FrankStein
  • 85
  • 13
0
votes
1 answer

Server not found in Kerberos database due to multiple DNS entries for single IP

There is a SharePoint which I'm accessing a file using REST API through Kerberos authentication , the problem is that the SharePoint where it is located has two DNS entries for a single IP, whenever it resolves to domain name 1, the API is getting…
0
votes
2 answers

KDC validation from TGS-REP

I have a question on validating the KDC from TGS-REP. I have a legacy test tool written in c++ that validates the user's AD credentials. This test-tool invokes krb5 library methods for performing the authentication and runs on client (linux…
kee
  • 46
  • 2
  • 10
0
votes
0 answers

Can we user Multiple UserGroupInformation (ugi) objects to authenticate with kerberized hadoop?

I need to authenticate two different HDFS cluster with different realms. But only one works fine when I instantiate another UGI object it gives the error UserGroupInformation.setConfiguration(conf); UserGroupInformation.loginUserFromKeytab(Principal…
UDIT JOSHI
  • 1,298
  • 12
  • 26
0
votes
1 answer

Cloudera node /etc/krb5.conf replaced at every reboot

I have a question, why are my cloudera nodes replacing the file /etc/krb5.conf ata every reboot ?? Im trying to make modifications, and when someone issues a reboot the file is again replaced by the old config file
Flechoide
  • 75
  • 3
  • 10
0
votes
1 answer

Kerberos Authentication in Oracle 12.2.0.1 with KERBEROS5PRE service and Cred Cache OSMSFT

I am trying to connect a web api that uses EntityFW and Oracle.ManagedDataAccess to an Oracle 12c (12.2.0.1) I have to use Kerberos Authentication with following…
0
votes
1 answer

kadmin: Communication failure with server while initializing kadmin interface

I have one node kerberos setup. I am able to query kdc using kadmin.local but when I try querying using kadmin( kadmin -p admin/admin@xxx.xxx.xxx) it fails with error: kadmin: Communication failure with server while initializing kadmin…
Santosh Kumar
  • 761
  • 5
  • 28
0
votes
0 answers

What's the differnece between service principals and user principals?

I'm setting up a Kafka-cluster with kerberos, and the instructions/documentation is a little sparse when it comes to multi-node clusters (specifically the service principals. What's the differnece between service principals and user principals…
james
  • 21
  • 2
0
votes
1 answer

kinit: Failed to store credentials: Bad format in credentials cache (filename: /tmp/krb5cc_651) while getting initial credentials

I have been trying to do kinit from client machine to KDC server to authenticate client kinit -kt host.keytab -p host/mydomain.com@REALM.COM but I am getting below error kinit: Failed to store credentials: Bad format in credentials cache …
JDP
  • 56
  • 2
  • 10
0
votes
2 answers

kinit: krb5_init_creds_set_keytab: Failed to find keytab (unknown enctype)

So as to enable access to Kerberized Hadoop from a MacBook, tried creating SPNEGO. Post copying the spnego keytab from KDC in Centos 7, doing a kinit failed with the following error: $kinit -kt /etc/security/keytabs/spnego.service.keytab…
Venkat
  • 41
  • 1
  • 5
0
votes
1 answer

Oozie Spark access to hive with kerberos

When I execute a spark process in oozie I have the following error. The database not found. 2018-09-26 15:27:23,576 INFO [main] org.apache.spark.deploy.yarn.Client: client token: Token { kind: YARN_CLIENT_TOKEN, service: } diagnostics:…
Bar
  • 129
  • 1
  • 1
  • 8