Questions tagged [sspi]

Use for questions having to do with the Security Support Provider Interface (SSPI) API.

The Security Support Provider Interface () is a Microsoft Windows API used to perform security-related operations such as authentication. It is implemented as a a dynamic-link library (DLL) supplied with the operating system. SSPI is the means by which the operating system loads SSPs (Security Support Providers), such as Kerberos and NTLM, when the system boots. The SSPI is the implementation of the Generic Security Service API () in Windows.

This article, while dated, is a good primer on : Logon and Authentication Technologies

214 questions
1
vote
0 answers

SSPI/LSA Authentication

Idea is to get a company domain credentials, I am trying to authenticate users which is using RAS cards and VPN to join a network. I found a code which is doing something similar, but for some reason it returns only local credentials.But I am…
Wild Goat
  • 3,509
  • 12
  • 46
  • 87
1
vote
1 answer

Implement a secure connection using SSPI in C++ - clarify some terms

I have to write an application that implements a secure connection between client and server using Microsoft API . Google give me a lot of results, and I have a big mess -need someone to make me some order in my head: Questions: what is SSPI…
RRR
  • 3,937
  • 13
  • 51
  • 75
1
vote
1 answer

Running two Django Apps on Apache with mod_auth_sspi and mod_wsgi

I've been running one Django app with Single Sign-On enabled by mod_auth_sspi using mod_wsgi. Apache/2.2.21 (Win32) mod_wsgi/3.3 Python/2.7.2 mod_auth_sspi/1.0.4 Problem is, that I can't add second Django app, which uses the same modules, because I…
1
vote
1 answer

Why would SECBUFFER_EXTRA point to the inside of SECBUFFER_STREAM_TRAILER after calling DecryptMessage?

We have a client application on a Windows 7 SP1 VM with the appropriate hotfixes and registry settings to enable TLS 1.2 communication. We have a server application on a Windows Server 2019 Datacenter VM. The client and server establish a TLS 1.2…
Ian
  • 143
  • 2
  • 11
1
vote
0 answers

Win SSPI Negotiate auth when running a service and client both locally

At my job I faced an issue while running a WebService locally and doing authentication into it also locally. WebService uses Waffle with SSPI through JNA and expects Negotiate mech to be used for auth and from the client side I use Java's HttpClient…
jboo7
  • 11
  • 2
1
vote
0 answers

How can I use SSPI to negotiate requests handled by external libraries?

I'll set expectations with the fact that I've been pushed well outside my area of expertise here. I'm behind a corporate firewall, and it's interfering with a lot of external code I use. For example, I'm trying to use HuggingFace's from_pretrained…
bendl
  • 1,583
  • 1
  • 18
  • 41
1
vote
1 answer

Does sspi module conflicts with ajax ? How to resolve it?

I think the Mod-Auth-SSPI is conflicting my ajax system. Please find the below code - new Ajax.Request(ajaxUrl, { method:'post', parameters: 'json='+json, onSuccess: function(transport) { if (transport.responseText.isJSON())…
Md. Nazmul
  • 11
  • 1
1
vote
0 answers

How to avoid NCrypt Pin prompt during Microsoft Schannel handshake having certificate with CNG key where PIN is already provided programmatically

I have client certificates created with CNG keys with provider "Microsoft Platform Key Provider". The CNG key has a password with strong key authentication using the CNG parameters NCRYPT_UI_FORCE_HIGH_PROTECTION_FLAG. I am trying to use the…
1
vote
2 answers

How to handle SEC_I_MESSAGE_FRAGMENT when performing a DTLS handshake via the SChannel SSPI?

When performing a DTLS handshake using the SChannel SSPI in Windows 10 - for which there is no documentation - how should the application handle a SEC_I_MESSAGE_FRAGMENT result from AcceptSecurityContext (ASC) or InitializeSecurityContext (ISC)? I…
Haddon CD.
  • 169
  • 8
1
vote
0 answers

Using sample code in RFC 4777 - InitializeSecurityContext returns error

I am trying to create a single-sign on connection to a System i server using the example published in IBM's iSeries Telnet Enhancements RFC 4777 within a client telnet app written in C++. The code sample given calls AcquireCredentialsHandle and then…
Rich
  • 35
  • 5
1
vote
0 answers

Need help resolving SSPI error message in SSMS after changing owner of SQL service

I recently had to change the owners of the SQL Server and SQL agent services. Windows Server 2016 OS and SQL Server 2016 Std Edition. The server in question hosts 6 instances and after changing the owner of the 2 services for all instances one of…
1
vote
1 answer

how to use node-sspi with fastify

I want to use https://github.com/abbr/nodesspi I am trying to use justify instead of express. It looks like it should just work but it doesn't. Its pretty much the equivalent of the express snippet. I get an error at the authenticate function…
The Fool
  • 16,715
  • 5
  • 52
  • 86
1
vote
1 answer

SSPI Schannel API returns undocumented value of 0xAE06 or CALG_ECDH_EPHEM

I am using the following code to query current TLS connection: SecPkgContext_ConnectionInfo data; QueryContextAttributes(&myHandle, SECPKG_ATTR_CONNECTION_INFO, &data); It returns correct structure with all the fields: typedef struct…
Maris B.
  • 2,333
  • 3
  • 21
  • 35
1
vote
0 answers

How to get the authority when using SSPI?

When you use the Security Support Provider Interface (SSPI) API to validate a user's credentials, the server ends up with a security context handle. You can then use the QueryContextAttributes function to query for information about the security…
Ian Boyd
  • 246,734
  • 253
  • 869
  • 1,219
1
vote
1 answer

SQLNestedException Exception - Native SSPI library not loaded

I am getting the exception below in my server logs. What does it mean and how do i fix it? org.apache.commons.dbcp.SQLNestedException: Cannot create PoolableConnectionFactory (I/O Error: SSO Failed: Native SSPI library not loaded. Check the…
Maro
  • 4,065
  • 7
  • 33
  • 34