kerberos

HttpClient set credentials for Kerberos authentication

旧巷老猫 提交于 2019-12-17 15:44:49
问题 I am trying to authenticate with a kerberos/HTTP host. Using Apache HttpClient as my client - and a slightly modified version of this source. My Kerberos authentication goes perfectly fine, and I wish to know how to set the login credentials programatically. At the moment, the credentials are entered manually through the console, but I want to have it chosen by me at run time. [ As I wish to automate and load test the server with a large number of users, actually. ]. EDIT : Here is a code

Spring security kerberos extension for production use?

人盡茶涼 提交于 2019-12-14 01:26:30
问题 The Spring Security – Kerberos Extension is listed as version 1.0M2 on the Spring Source web site. It was started in 2009. Why hasn't it made a 1.0 release? Is it suitable for production use? If it is not suitable for production use, what is the best alternative to plug into Spring Security? 回答1: We use successfully Spring Security Kerberos/SPNego in production since more than one-year, and we are quite happy with it! However, I can't say why 1.0 is not released. 来源: https://stackoverflow.com

GSSException: [..] Encryption type AES256CTS mode with HMAC SHA1-96 is not supported/enabled

妖精的绣舞 提交于 2019-12-14 00:17:25
问题 After setting our domain users to support AES encryption for Kerberos tokens (Windows Server 2008R2), on a web-application server side we get the following exception: GSSException: Failure unspecified at GSS-API level (Mechanism level: Encryption type AES256CTS mode with HMAC SHA1-96 is not supported/enabled) Strangely we have Java 6 (1.6.0_27) , which means that AES should be supported, according to this document: http://docs.oracle.com/javase/6/docs/technotes/guides/security/jgss/jgss

How to logon a user on a server and run a process given a Kerberos Ticket

廉价感情. 提交于 2019-12-13 21:18:04
问题 How does authentication and logon work on Windows with Kerberos? What I want to achieve is to logon a user on a server and run a process for that user. As a first step, I create a Kerberos ticket on the client and send it to the server. On the server, I do not know the API to logon the user given its ticket. Of course I can accept the security context using AcceptSecurityContext (SSPI), but that does not initiate a logon. I think that some SSH implementations for Windows do exactly that. But

Kerberos - difference between JAAS connection to server and SQL Server Trusted Connection

拈花ヽ惹草 提交于 2019-12-13 21:15:33
问题 My understanding is that both JAAS and SQL Server can be configured to use kerberos in a domain environment, with an active directory server. My understanding that JAAS gets the user credentials from the user or from a file at the time of the connection - asks the directory server for a ticket, and presents that to the server. Where does the SQL Server Driver get its kerberos ticket from? (as it seems to be able to obtain creditentials from the users existing login). Does it get the user

How do I get JNDIRealm in Tomcat to use Kerberos auth?

感情迁移 提交于 2019-12-13 20:06:29
问题 I am trying to run a tomcat JNDIRealm using using Kerberos for authentication (authentication="GSSAPI"). However, I'm getting this: SEVERE: Catalina.start: LifecycleException: Exception opening directory server connection: javax.naming.AuthenticationException: GSSAPI [Root exception is javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Attempt to obtain new INITIATE credentials failed! (null)) ]] I have this in

Domain authentication with Kerberos fails

ぃ、小莉子 提交于 2019-12-13 18:25:50
问题 My app is using Grails, Spring, Kerberos. applicationContext.xml <beans ... <sec:http entry-point-ref="spnegoEntryPoint"> <sec:intercept-url pattern="/**" access="IS_AUTHENTICATED_FULLY" /> <sec:custom-filter ref="spnegoAuthenticationProcessingFilter" position="BASIC_AUTH_FILTER" /> </sec:http> <bean id="spnegoEntryPoint" class="org.springframework.security.kerberos.web.authentication.SpnegoEntryPoint" /> <bean id="spnegoAuthenticationProcessingFilter" class="org.springframework.security

Kerberos Authentication through Spring Security Failing in IE11 and Chrome but not Firefox

独自空忆成欢 提交于 2019-12-13 17:16:08
问题 Intro I am using Spring Securities Kerberos authentication to handle logging into by website. I followed the instructions here and used the code from here to authenticate the user. In Firefox, everything is successful, the login page below pops up as expected and I can login in using my windows login. However, the authentication fails in IE and Chrome. Instead of the login screen showing up, a popup asking for the password is shown. When I put in the Windows user and password I get the screen

Spring Boot MSSQL Kerberos Authentication

一笑奈何 提交于 2019-12-13 12:58:40
问题 Currently in my spring boot application.properties file, I am specifying following lines to connect to MSSql server. spring.datasource.url=jdbc:sqlserver://localhost;databaseName=springbootd spring.datasource.username=sa spring.datasource.password=Projects@123 Instead of giving username and password, I want to authenticate user using kerberos, what all changes I will have to make. I tried searching in the JPA official documentation but could not find any. Leads here are appreciated. 回答1:

InitializeSecurityContext: The specified target is unknown or unreachable

一个人想着一个人 提交于 2019-12-13 06:30:15
问题 Overall goal: I'm trying to authenticate to Active Directory over LDAP with Kerberos on Windows. Due to dependencies, I'm unable to use python-ldap or python-gssapi , so I'm using ldap3 with the patch found in this answer to use Kerberos (by way of winkerberos instead of python-gssapi ). Example code: from ldap3 import Connection, Server, ALL, IP_V4_PREFERRED, SASL, GSSAPI domain_controller = input("DC: ") SERVER = Server(domain_controller, allowed_referral_hosts=[('*', True)], get_info=ALL,