Questions tagged [sspi]

Use for questions having to do with the Security Support Provider Interface (SSPI) API.

The Security Support Provider Interface () is a Microsoft Windows API used to perform security-related operations such as authentication. It is implemented as a a dynamic-link library (DLL) supplied with the operating system. SSPI is the means by which the operating system loads SSPs (Security Support Providers), such as Kerberos and NTLM, when the system boots. The SSPI is the implementation of the Generic Security Service API () in Windows.

This article, while dated, is a good primer on : Logon and Authentication Technologies

214 questions
0
votes
2 answers

SspiPromptForCredentials Target Name

I've been developing an application that uses SSPI for Client / Server authentication. Everything works fine, but still one question remains. The first argument of SspiPromptForCredentials is the target name... But what is it really used for? I can…
NonoxX
  • 134
  • 10
0
votes
2 answers

WAMP does not start after enabling/configuring SSPI

I am trying to get visitors' NT logon when they visit an intranet site. It appears the the SSPI module is what I'm looking for. But I can't get WAMP back up and running after installation. Any assistance would be appreciated. Thanks in advance. I…
WD-40
  • 319
  • 2
  • 7
  • 18
0
votes
1 answer

SSO using Kerberos on Windows and Linux

We have a client/server based application that is developed internally. Clients and server communicate over a TCP/IP connection with an application-specific protocol. The clients run on Windows and the server runs on Linux. All machines are in the…
rveerd
  • 3,620
  • 1
  • 14
  • 30
0
votes
2 answers

SSPI Errors for SQL Server Authentication?

We have several old ASP and PHP web applications which use SQL Server Authentication. Periodically, all the applications lose the ability to connect to our SQL Server 2000 database server, getting access denied. Corresponding to roughly the same…
Nathan
  • 10,593
  • 10
  • 63
  • 87
0
votes
1 answer

Integrated Security SSPI - The Select Permission was denied on the object

I am getting this error for 2 of 3 users when they attempt to run a Macro enables Excel workbook that queries MSSQL 2014 from Excel 2013 & 2016. I thought since the code had "integrated security = SSPI" set, that every user would have the same…
KirstieBallance
  • 1,238
  • 12
  • 26
0
votes
1 answer

Kerberos Impersonation using SSPI: no errors, but not working

I need to impersonate a user in a Java application server, and execute an http request to an ASP application in IIS with the permissions of that user. I am trying to adapt the WindowsNegotiateScheme class of the Apache HttpClient for this purpose.…
FrankPl
  • 573
  • 4
  • 19
0
votes
2 answers

Deploying SSIS -- Cannot Generate SSPI Context

I am attempting to deploy an SSIS package to a server. I can build connection managers to the target server and databases on that server. However, attempting to deploy the error appears:
Sauron
  • 6,399
  • 14
  • 71
  • 136
0
votes
3 answers

The target principal name is incorrect. Cannot generate SSPI context. Azure SQL Database

I am getting the error the target principal name is incorrect. Cannot generate SSPI context when trying to access a database that is in an Azure SQL Database when using Power BI Desktop Has anyone else encountered this? Management studio can…
Paul
  • 2,773
  • 7
  • 41
  • 96
0
votes
1 answer

Understanding the NegotiateFlags parameter of NTLM messages

I'm struggling to understand how to properly read and construct my NegotiateFlags parameter on the NTLM messages. On the official protocol specification I simply cannot understand that table. I think it represents a 32-bits since the NegotiateFlags…
user2864778
  • 333
  • 5
  • 18
0
votes
0 answers

SSPI negotiation failed with WtrustChannelFactory

This one has me for a while now, I am trying to build a console app that can call a .net web/wcf service SP, the first leg is to get a token from the idP (ADFS4.0) the pasted code was working fine for a whole day, at some point it stopped working…
amritanshu
  • 777
  • 13
  • 25
0
votes
1 answer

tortoise svn checkout access forbidden and not prompting for login

I have been using tortoise svn for a long time on this pc but it has suddenly stopped working. I was performing svn checkout via tortoise and it returns the error: Unable to connect to a repository at URL: Access to
paolov
  • 2,139
  • 1
  • 34
  • 43
0
votes
0 answers

Alternatives to LsaLogonUser with KERB_S4U_LOGON have Network access?

Are there any alternatives to LsaLogonUser for impersonating given account in order to access network resources? I'm looking for the method of impersonation which would let me call a remote machine via UNC in the same domain. For initial data I…
Flinkas
  • 56
  • 9
0
votes
2 answers

Running a t-sql stored procedure with EXECUTE AS statement with .NET SqlCommand

I have a .NET web service application that executes parameterized MS SQL Server stored procedures using System.Data.SqlCommand. The application receives a name of the stored procedure and its parameters from user input. Also the application…
prot
  • 240
  • 4
  • 23
0
votes
1 answer

git cvsimport from remote machine accessible via SSPI only?

I have a CVS repository on a remote Windows machine, checked out to my local Windows machine. I want to use git cvsimport to have git log, but the remote repo is only accessible via SSPI, which, if I understand this answer correctly doesn't work…
afarah
  • 748
  • 3
  • 19
0
votes
0 answers

Is there any way to disable the replay cache when authenticate with SSPI?

I uses SSPI Kerberos do user authentication on Windows. While the AcceptSecurityContext() always fail when it receives a same token from client. It seems caused by replay cache. Is there any way to disable it on Windows with C?