Questions tagged [sspi]

Use for questions having to do with the Security Support Provider Interface (SSPI) API.

The Security Support Provider Interface () is a Microsoft Windows API used to perform security-related operations such as authentication. It is implemented as a a dynamic-link library (DLL) supplied with the operating system. SSPI is the means by which the operating system loads SSPs (Security Support Providers), such as Kerberos and NTLM, when the system boots. The SSPI is the implementation of the Generic Security Service API () in Windows.

This article, while dated, is a good primer on : Logon and Authentication Technologies

214 questions
4
votes
0 answers

Windows SSPI to Java GSSAPI interoperability to achieve SSO on EJB calls

I have Java client running on Windows machine that calls remote EJB on JBoss EAP/Wildfly running on Linux machine. I use Kerberos to achieve SSO. Java client verifies the user against Windows domain and pass his identity within EJB call to the JBoss…
4
votes
1 answer

How do I handle Negotiate in .NET?

I'm trying to implement Negotiate (at least the Kerberos part) in a small web server. I've figured out how to get a client to send me a Kerberos Negotiate Authorization header. I've figured out how to decode that data (ASN.1). I cannot figure out…
Ethan Reesor
  • 2,090
  • 1
  • 23
  • 40
4
votes
2 answers

Solution to avoid double-hop from client > web service > SQL Server

My project invoves a user connecting from client to web service, and then web service to SQL Server. The web services and SQL Server are on separate machines. Because of security requirements, we cannot used mixed mode in SQL Server, only Windows…
8kb
  • 10,956
  • 7
  • 38
  • 50
4
votes
1 answer

WCF Kerberos SSPI Fails when one Domain Controller is down

My WCF Service is using Windows Authentication with Kerberos, we disable the NTLM. The service is running under one Domain user account and the client on the different Domain user account. And both are configure using UPN. Both client and service…
John Hpa
  • 463
  • 6
  • 18
4
votes
1 answer

a call to sspi failed see inner exception. the message received was unexpected or badly formatted in windows 7]

I am getting the following error " a call to sspi failed see inner exception. the message received was unexpected or badly formatted in windows 7". i tried all the possible ways but no luck. please check it Here is the code int port = 2195; …
4
votes
1 answer

AcquireCredentialsHandle returns SEC_E_NO_CREDENTIALS

I created a self-signed certificate (created using OpenSSL) and installed it into the Certificate Store using the Certificates MMC snap-in (CertMgr.msc) on Windows Vista Ultimate. I have managed to open the certificate store by using…
Bruce
  • 440
  • 1
  • 12
  • 19
4
votes
1 answer

Authenticate with SSPI to vSphere using C# API

I am using the C# library for connecting to vSphere (VimClient). I use this method to log in: VimClient client = new VimClient(); client.Connect("https://vSphereMachine/sdk"); client.Login("userName", "password"); The user I'm logging in as is the…
Michael Hedgpeth
  • 7,732
  • 10
  • 47
  • 66
4
votes
3 answers

Simple client/server, TCP/IP encrypting the message stream, SSL (C++)

Basically my question is the exact same one as this: Simple client/server, TCP/IP encrypting the message stream, SSL The difference is that I need this for pure C++, not .NET. I cannot use 3rd party libraries, so unless it's a Windows system…
Rabbit
  • 1,741
  • 2
  • 18
  • 27
3
votes
1 answer

Microsoft Windows SChannel SSPI Self test?

The question pertains to some specs (FIPS) that require the SChannel modules used for TLS perform a self test prior to use to validate that they have not been compromised. FIPS is one example. In the Open source libraries there are self tests built…
Mike Trader
  • 8,564
  • 13
  • 55
  • 66
3
votes
3 answers

How to specify accepted certificates for Client Authentication in .NET SslStream

I am attempting to use the .Net System.Security.SslStream class to process the server side of a SSL/TLS stream with client authentication. To perform the handshake, I am using this code: SslStream sslStream = new SslStream(innerStream, false,…
Rasmus Faber
  • 48,631
  • 24
  • 141
  • 189
3
votes
2 answers

SQL Server: The server principal is not able to access the database under the current security context / windows authentication for the login

I saw a couple of other questions like this one but no one could solve my issue. I have a SQL 2016 Express and a database mydatabase. I created a login using Windows Authentication and I used my AD user domain\myuser. In mydatabase -> security ->…
3
votes
1 answer

How to invoke SSPI's 'AcquireCredentialsHandle' with supplied credentials?

Background The Windows SSPI API is an interface into the Windows security service that allows you to authenticate clients and servers to each other. One of the major uses of the API is to provide Windows Integrated Authentication aka Single Sign-on…
antiduh
  • 11,853
  • 4
  • 43
  • 66
3
votes
1 answer

Subversion using SSPI module HTTP vs HTTPS

I'm upgrading our svn server and want to change to windows authentication instead of htpassword files. I've installed the module and can get it running on HTTP or HTTPS. Accessing the repos, using TortoiseSVN, I have 2 scenarios: Accessing when…
Christian Mikkelsen
  • 1,661
  • 2
  • 19
  • 44
3
votes
1 answer

SASL bind over GSSAPI using kerberos credentials with ldap_sasl_bind_s function

I am trying to implement SASL bind over GSSAPI using kerberos credentials with ldap_sasl_bind_s function. I follow to the steps described in ldap_sasl_bind_s(GSSAPI) - What should be provided in the credentials BERVAL structure chain I get expected…
3
votes
1 answer

RabbitMQ client with SSL connection throws SSPI exception

When using the RabbitMQ client with SSL enabled, CreateConnection(); throws an exception. The inner exception is with SSPI and inside that a token invalid exception. The RabbitMQ server has been tested in java and works as expected, so the problem…
Tim Blackwell
  • 699
  • 1
  • 7
  • 18
1 2
3
14 15