Questions tagged [sspi]

Use for questions having to do with the Security Support Provider Interface (SSPI) API.

The Security Support Provider Interface () is a Microsoft Windows API used to perform security-related operations such as authentication. It is implemented as a a dynamic-link library (DLL) supplied with the operating system. SSPI is the means by which the operating system loads SSPs (Security Support Providers), such as Kerberos and NTLM, when the system boots. The SSPI is the implementation of the Generic Security Service API () in Windows.

This article, while dated, is a good primer on : Logon and Authentication Technologies

214 questions
2
votes
0 answers

Avoid Kerberos ticket from expiring after HTTP request

I implemented a Java solution to retrieve a Kerberos ticket, I based my solution on the answer on this thread How to obtain a kerberos service ticket via GSS-API? I need the ticket to send an HTTP request to an endpoint. The ticket is being…
Juan Ga
  • 87
  • 5
2
votes
2 answers

Allow LocalSystem to access PostgreSQL database

I'm trying to configure my PostgreSql database ("mydb") in order to give login rights to the windows "LocalSystem" account. I've created a user in my database named LocalSystem SQL> CREATE USER LocalSystem; Then, I've tried using SSPI config in…
2
votes
1 answer

Oracle IAM/WNA protocol fallback to form-based logon page fails when Microsoft Online Services Sign-In Assistant is installed

First post here. Facing a problem where on Windows 10 an Oracle Identity Access Management (IAM) Windows Native Authentication (WNA) protocol fallback to a form-based logon page always fails whenever the Microsoft Online Services Sign-In Assistant…
Kim Lee
  • 53
  • 8
2
votes
2 answers

Retrieving specific user details from AD via c#/.Net

I am trying to retrieve SamAccountName,Surname,GivenName for users within a particular ADGroup using: PrincipalContext principalContext = new PrincipalContext(ContextType.Domain); GroupPrincipal group =…
Keith Clark
  • 609
  • 1
  • 7
  • 19
2
votes
2 answers

Encrypt and sign a message using Microsoft Security Support Provider Interface (SSPI)

I want to use Microsoft's Security Support Provider Interface (SSPI) in a Windows Domain environment (with Kerberos) to send encrypted and signed messages between two entities (in C++). Based on the documentation within the MSDN, there are the two…
chrobs
  • 389
  • 1
  • 3
  • 8
2
votes
1 answer

Mixing authenticated and unauthenticated URLs, Internet Explorer and mod_auth_sspi

Setup: Apache 2.2, mod_auth_sspi 1.0.3/1.0.4, mod_wsgi 3.3, python 2.6.2 Some background information: Whenever IE hits an URL, that requires it to perform NTLM challenge-response, further POST requests to the same domain are performed as follows: A…
shylent
  • 10,076
  • 6
  • 38
  • 55
2
votes
0 answers

How to optimize NTLM SSPI authentication - apache web server

We have NTLM authentication for our application using SSPIAuth on apache for which we have done following configuration in our apache vhosts file: SetHandler dispatcher-handler AuthName "A Protected Place" AuthType SSPI …
Ankit
  • 3,083
  • 7
  • 35
  • 59
2
votes
0 answers

Connect to SQL Server from .New WebPage using the domain user ID of current user

I have a webpage that uses SQL Server ID to connect to the database. I want this webpage to use the Domain User ID of current user to connect to the SQL Server database. For example, if user ABC accesses the page, the website will use credentials…
2
votes
0 answers

APNS push notification error - A call to SSPI failed, see inner exception

I know that this questions has been asked before, but none of that seems to help me. I am trying to send push notifications from my asp.net application but i get the following error: "A call to SSPI failed, see inner exception." System.Exception…
Marius Popa
  • 564
  • 1
  • 5
  • 22
2
votes
1 answer

Laravel 4 - Route::any except

I'm quite new to Laravel and I'm trying to make a system that checks if a user is "logged-in". For some reasons, I'm using SSPI Authentication. So basically, when the user arrives on the website, there's a login pop-up which asks for a login and…
BMN
  • 8,253
  • 14
  • 48
  • 80
2
votes
0 answers

Using SSPI to connect to remote PostgreSQL server using Npgsql

I am using nHibernate + Npgsql to connect to PostgreSQL server using windows authentication (SSPI). I have added the windows user to the Postgres and have configured the settings as recommended by…
2
votes
0 answers

best practise for sspi user

I am currently setting a web and sql windows server for a 3 mvc web applications. I have got a sspi domain user set up but not familiar at the correct and most optimal setup for such. Do all app pools get set up with this user? Do all databases on…
amateur
  • 43,371
  • 65
  • 192
  • 320
2
votes
1 answer

Connect to PostgreSQL using integrated security or fall back to public login

I am using Npgsql and I was wondering whether there was a way to connect to a PostgreSQL server using integrated security that automatically falls back to a public login? Or maybe there is another way to do what I am trying to achieve. I have an…
dreamlax
  • 93,976
  • 29
  • 161
  • 209
2
votes
1 answer

Windows user credential validation on a different domain

I'm trying to validate a user's windows credentials on a computer that's not joined to the domain. It seems like this should be possible to do using the SSPI API, but I haven't been able to get it to work. I included the code that I've been trying…
thudbang
  • 220
  • 2
  • 8
2
votes
0 answers

A call to SSPI failed, see inner exception. the context has expired and can no longer be used

A call to SSPI failed, see inner exception. the context has expired and can no longer be used. what does this error mean? I have a certificate on my MDM server, and the device gets its identity certificate from SCEP. I am trying to install the…
michelle
  • 2,759
  • 4
  • 31
  • 46