Questions tagged [sspi]

Use for questions having to do with the Security Support Provider Interface (SSPI) API.

The Security Support Provider Interface () is a Microsoft Windows API used to perform security-related operations such as authentication. It is implemented as a a dynamic-link library (DLL) supplied with the operating system. SSPI is the means by which the operating system loads SSPs (Security Support Providers), such as Kerberos and NTLM, when the system boots. The SSPI is the implementation of the Generic Security Service API () in Windows.

This article, while dated, is a good primer on : Logon and Authentication Technologies

214 questions
1
vote
1 answer

Confusion about Kerberos, delegation and SPNs

I'm trying to write a proof-of-concept application that performs Kerberos delegation. I've written all the code, and it seems to working (I'm authenticating fine), but the resulting security context doesn't have the ISC_REQ_DELEGATE flag set. So I'm…
Vilx-
  • 104,512
  • 87
  • 279
  • 422
1
vote
1 answer

PostgreSQL ODBC Connection SSPI Authentication Failure

I've recently made some changes to an existing application that I'm maintaining for our company to try to improve on some of the functionality. However, I've run into an issue, and I'm not able to find anything helpful through all of my Google…
G_Hosa_Phat
  • 976
  • 2
  • 18
  • 38
1
vote
1 answer

ASP.NET site fail when accessed remotely, 'NT AUTHORITY\ANONYMOUS LOGON'. Accessing SQL Server with domain user of the App Pool

I have an ASP.NET (4.0) site accessed using Window Authentication & Impersonation only (Anoymous Disabled). The SQL Server Connection is done with SSPI, and with the user identity of the Application pool, not with Windows Domain User of the logged…
Gabriel
  • 595
  • 7
  • 10
1
vote
1 answer

WCF: Why does passing in a remote endpoint fail?

The problem I am having connecting a wcf client application to a host running on a separate machine is documented in a question previously asked: WCF: Why does passing in a remote endpoint fail? However, the solution provided here says you need to…
Plastikfan
  • 3,674
  • 7
  • 39
  • 54
1
vote
0 answers

pyCurl checking if SSPI is enabled

The default build of pycurl from what I understand does not support SSPI and also is built against a very old version of libcurl ~ 7.19. So I have gone ahead and made my own build of this library. I have installed the new libcurl and pycurl source…
Matt Seymour
  • 8,880
  • 7
  • 60
  • 101
1
vote
0 answers

Retrieve Kerberos token via SSPI by username

Is there way to retrieve user token locally without password?
dr11
  • 5,166
  • 11
  • 35
  • 77
1
vote
1 answer

Push notification not appearing

I can't seem to get MoonAPNS to work. I know there have been a few questions on the same issue, for example this one. I've followed the tutorial on creating the p12 certificate and successfully used it with a php script to send a notification to the…
Robert
  • 5,278
  • 43
  • 65
  • 115
1
vote
1 answer

AcceptSecurityContext random SEC_E_LOGON_DENIED

I'm trying to implement Single Sign On in an http.sys-based server (using IOCP), and I'm having weird issues with AcceptSecurityContext, which will randomly fail with SEC_E_LOGON_DENIED. I'm getting the failure randomly when connecting from the same…
Eric Grange
  • 5,931
  • 1
  • 39
  • 61
1
vote
3 answers

Need a C# signature for AcquireCredentialsHandle win32 api function

I have somehow come out with a signature for this api call, but the call does not work in the expected fashion. Some vital data structures are not get populated properly hence I am not getting intended output. The signature I've used…
deostroll
  • 11,661
  • 21
  • 90
  • 161
1
vote
0 answers

How do I interpret the expiry returned by AcquireCredentialsHandle (Kerberos)?

The Windows SSPI call AcquireCredentialsHandle returns a time stamp indicating when the credentials handle will expire. The docs seem to be saying that the TimeStamp structure should have the same format as a FILETIME structure. However, when I use…
Lachlan
  • 3,744
  • 2
  • 26
  • 29
1
vote
3 answers

I/O Error: SSO Failed: SSPI Not Initialized

I am using pentaho data integration 4.1 (Kettle) to build an ETL system. My customer requires connecting to database (MS SQL Server) using window authentication, I knew that Kettle supported it . However when I run my Kettle job, it throws the…
Minh-Hung Nguyen
  • 1,164
  • 1
  • 15
  • 21
1
vote
2 answers

How to Setup Multiple Authentication Types for 1 Subversion Repo?

We have an SVN 1.4 repository that uses Apache 2.0 for authentication; specifically, the mod-auth-sspi module to authenticate with our Windows Domain. The relevant portion of httpd.conf looks like this: AuthType SSPI …
William Leara
  • 10,595
  • 4
  • 36
  • 58
0
votes
1 answer

c# WCF SSPI failed during connecting to Windows Service

I want to mention that i am new to WCF. I encountered a problem connecting to a WCF service. The WCF service was created with netTcpBinding and installed on the server machine as Window Service which is running on specific account (defined in…
0
votes
1 answer

not compatible with PSECURITY_STRING

I'm trying to use code from http://msdn.microsoft.com/en-us/library/windows/desktop/aa380536(v=VS.85).aspx The line for AcquireCredentialsHandle says that the second argument is not compatible with PSECURITY_STRING. Anyone know what I can do here?
Bluebaron
  • 2,289
  • 2
  • 27
  • 37
0
votes
0 answers

Using Kerberos Service Ticket for Local HOST Service and Obtaining a Network Token in C++

I have the following requirement: I have saved the Kerberos service ticket for the current computer's HOST service in the local computer cache. Now, I want my client/server program to use this service ticket to initiate requests against the local…
Anonymous
  • 1
  • 1