kerberos

spring-security-kerberos can't read keytab?

由 五迷三道 提交于 2020-01-14 20:42:11
问题 I'm trying to follow this tutorial for spring-security-kerberos I have a keytab with one principal in it: ktutil: rkt http-web.keytab ktutil: l slot KVNO Principal ---- ---- --------------------------------------------------------------------- 1 3 HTTP/aulfeldt.hta.nightly@WAD.ENG.HYTRUST.COM This keytab was generated on a the win 2k8 domain controller with this command: ktpass /out http-web.keytab /mapuser aulfeldt-hta-nightly@WAD.ENG.HYTRUST.COM /princ HTTP/aulfeldt.hta.nightly@WAD.ENG

spring-security-kerberos can't read keytab?

由 旧时模样 提交于 2020-01-14 20:41:12
问题 I'm trying to follow this tutorial for spring-security-kerberos I have a keytab with one principal in it: ktutil: rkt http-web.keytab ktutil: l slot KVNO Principal ---- ---- --------------------------------------------------------------------- 1 3 HTTP/aulfeldt.hta.nightly@WAD.ENG.HYTRUST.COM This keytab was generated on a the win 2k8 domain controller with this command: ktpass /out http-web.keytab /mapuser aulfeldt-hta-nightly@WAD.ENG.HYTRUST.COM /princ HTTP/aulfeldt.hta.nightly@WAD.ENG

Kerberos - SPN and keytabs

由 岁酱吖の 提交于 2020-01-14 04:23:32
问题 I have a project that have embedded jetty with SPNEGO enabled. I would like to be able to run this project locally for development purposes (WITH SPNEGO enabled!) My question is, is the SPN and keytab associated with a particular server at all or can I use the same set on multiple instances of my service? 回答1: Kerberos requires that both the client and server somehow figure the service principal to use without any prior contact. If you have control of both the client and server, you can use

kerberos服务器搭建

由 别来无恙 提交于 2020-01-13 13:46:03
kerberos服务器搭建 Kerberos是一种网络身份验证协议。它旨在通过使用秘密密钥加密为客户端/服务器应用程序提供强身份验证。 一. 安装Kerberos服务器 二. 安装Kerberos客户端 一. 安装Kerberos服务器 1. 准备工作 确认添加主机名解析到 /etc/hosts 文件中： 192 . 168 . 56 . 100 hadoop1 192 . 168 . 56 . 101 hadoop2 服务器规划： 主节点（Kerberos Master） 客户端（Kerberos Client） hadoop1 hadoop1 hadoop2 2. yum安装kerberos yum -y install krb5-server krb5-lib krb5-workstation 安装完成后需要修改三个配置文件： /var/kerberos/krb5kdc/kdc.conf /var/kerberos/krb5kdc/kadm5.acl /etc/krb5.conf 3.修改配置文件 修改 /var/kerberos/krb5kdc/kdc.conf [kdcdefaults] kdc_ports = 88 kdc_tcp_ports = 88 [realms] GONGHF . COM = { #master_key_type = aes256-cts acl

Kerberos Authorization w/ Node.js

由 六月ゝ 毕业季﹏ 提交于 2020-01-13 05:30:14
问题 I have found many different node.js authentication modules. Ei passport-kerberos. But I am looking to make background https calls to another kerberos authenticated site w/ an authorization token. Does anyone know of any modules for getting an authorization token from credentials in a node app? 来源： https://stackoverflow.com/questions/22724978/kerberos-authorization-w-node-js

0486-如何将Kerberos的CDH5.16.1从Oracle JDK 1.8迁移至OpenJDK 1.8

由 给你一囗甜甜゛ 提交于 2020-01-12 15:57:05
温馨提示：如果使用电脑查看图片不清晰，可以使用手机打开文章单击文中的图片放大查看高清原图。 Fayson的github： https://github.com/fayson/cdhproject 提示：代码块部分可以左右滑动查看噢 1 文档编写目的 受前段时间Oracle官宣的从2019年1月之后将不再提供免费的的JDK商业版本的影响，Cloudera开始开发基于OpenJDK的Hadoop平台，参考Fayson之前的文章《 Java收费，Hadoop怎么办？ 》。今年11月29日，Cloudera才发布不久的CDH5.16.1正式提供OpenJDK的支持，参考Fayson之前的文章《 0466-CDH5.16.1和CM5.16.1的新功能 》。本文Fayson主要介绍如何将CDH从Oracle JDK迁移到OpenJDK。 JDK的迁移需要重启整个集群，所以对于所有主机的重启你需要规划停机时间。如果你的集群启用了HDFS HA，可以使用滚动重启而不用规划停机时间。 内容概述 1.CDH各版本的JDK支持说明 2.迁移JDK 3.检查JDK的使用版本 4.组件功能校验 5.总结 测试环境 1.CM和CDH版本为5.16.1 2.采用root用户操作 3.Redhat7.4 2 CDH各版本的JDK支持说明 Cloudera Manager和CDH需要所有节点都安装了受支持的Java

How do I configure IIS so that the user's domain credentials are used when connecting to SQL server?

由 亡梦爱人 提交于 2020-01-11 02:30:49
问题 We've recently released the latest version of our intranet application, which now uses windows authentication as standard, and needs to be able to connect to a configured SQL server with the end-user's domain credentials. Lately we've found that on a couple of customer deployments, although IIS can see the user's domain credentials, it will not pass these on to SQL server. Instead, it seems to use the anonymous account. This is in spite of following all the correct steps (changing the

npm install mongoose causes gyp and kerberos errors (gssapi/gssapi.h file not found)

由 ぐ巨炮叔叔 提交于 2020-01-09 09:19:28
问题 Ubuntu 14.04 nodejs version is v4.1.1 installed with these commands: curl -sL https://deb.nodesource.com/setup_4.x | sudo -E bash - sudo apt-get install -y nodejs mongodb installed via mongodb docs tutorial Next I tried installing mongoose by doing sudo npm install mongoose I received the following error: > kerberos@0.0.14 install /root/node_modules/mongoose/node_modules/mongodb/node_modules/mongodb-core/node_modules/kerberos > (node-gyp rebuild) || (exit 0) gyp ERR! build error gyp ERR!

npm install mongoose causes gyp and kerberos errors (gssapi/gssapi.h file not found)

由 旧巷老猫 提交于 2020-01-09 09:17:47
问题 Ubuntu 14.04 nodejs version is v4.1.1 installed with these commands: curl -sL https://deb.nodesource.com/setup_4.x | sudo -E bash - sudo apt-get install -y nodejs mongodb installed via mongodb docs tutorial Next I tried installing mongoose by doing sudo npm install mongoose I received the following error: > kerberos@0.0.14 install /root/node_modules/mongoose/node_modules/mongodb/node_modules/mongodb-core/node_modules/kerberos > (node-gyp rebuild) || (exit 0) gyp ERR! build error gyp ERR!

深入详解windows安全认证机制ntlm&Kerberos

由 青春壹個敷衍的年華 提交于 2020-01-08 12:52:13
0x01 为什么要理解windows 安全认证机制: 加深对后续各种漏洞利用的理解深度,还是那句话,要知其然,更要知其所以然,不废话,咱们直接开始 0x02 windows认证协议主要有以下两种: 基于ntlm的认证方式,主要用在早期的windows工作组环境中,认证的过程也相对比较简单 另一种是基于Kerberos的认证方式,主要用在域环境中,下面就这两种不同的认证方式做些简要的通信流程说明 0x03 关于ntlm认证流程简要说明,如下: 0x04 从图中我们可以清晰的看到,ntlm在域中的认证过程主要分为以下几步: 第一步,首先在client输入username,password和domain,然后client会把password hash后的值先缓存到本地 第二步,之后,client把username的明文发送给server(DC) 第三步,DC会生成一个16字节的随机数,即challenge(挑战码),再传回给client 第四步,当client收到challenge以后,会先复制一份出来,然后和缓存中的密码hash再一同混合hash一次,混合后的值称为response,之后client再将challenge,response及username一并都传给server 第五步,server端在收到client传过来的这三个值以后会把它们都转发给DC 第六步
订阅 kerberos