3,567 questions
Best practices
0
votes
0
replies
11
views
Kerberos Authentication Flow on Openshift
I’m trying to implement Kerberos SSO (SPNEGO / Integrated Windows Authentication) for a web application in an Active Directory environment.
The application is deployed on OpenShift Kubernetes and ...
1
vote
0
answers
27
views
Hadoop Kerberos client fails on WildFly with "Parameter 'callbackHandler' may not be null" (Elytron SASL GSSAPI)
I am running a Hadoop HDFS client inside WildFly and connecting to a Kerberos-secured HDFS cluster.
Environment:
- WildFly 34 (bootable JAR)
- Java 17
- Hadoop client 3.x
- Kerberos authentication ...
0
votes
1
answer
41
views
apache auth-kerb and a user list to allow doesnt work
I guess the solution is quite easy, but I just dont see the point:
We had a kerb auth working, but s'one destroyed it quite a while ago.
Now I dont get it working again:
kerb authentication works and ...
0
votes
1
answer
159
views
Kerberos "Ticket not yet valid" error when verifying service ticket in Node.js server
I am using the kerberos Node.js library to verify Kerberos service tickets. My setup includes:
Active Directory Windows Server on the network.
Linux server that verifies service tickets received from ...
0
votes
1
answer
48
views
flink on yarn, ContainerLocalizer download locally file failed
I submit a Flink job to Hadoop-Yarn, and use Flink application mode. Everything is normal on the client side, but the app master starts failing on the NodeManager, with the following logs.
...
1
vote
2
answers
133
views
Kerberos: Verifying TGS using NodeJS
I'm building a single-sign-on solution where:
A user boots up their Active Directory–joined Windows machine.
My app auto-starts after the Winlogon event.
Since the user already has a TGT from logon, ...
1
vote
1
answer
91
views
Kerberos authentication with SPNEGO in Swift
I am trying to build a MacOS application can manage calls to protected resources using kerberos authentication. In a browser, that's the seamless authentication which works easily (using the WWW-...
1
vote
1
answer
371
views
How I can generate correct SPNEGO token from existing kerberos token using pyspnego?
I am trying to solve the problem of accessing a service (HTTP) using the kerberos constrained delegation mechanism. It seems that I am forming the kerberos ticket correctly, but at the same time ...
1
vote
1
answer
221
views
Firefox doesn't show the kerberos challenge
I'm building an app behind IIS. IIS manages authentication and reverse proxy to my app.
in IIS :
anonymous Authentication disabled
Asp.net impersonation disabled
Windows authentication enabled, ...
1
vote
2
answers
221
views
How to use a cached Kerberos TGS ticket with GSS API in Java?
I am trying to get a Kerberos TGS ticket from the cache (without contacting the KDC).
I create a TGT ticket using kinit and a TGS ticket, using kvno cifs/.
To ensure I have cached the tickets, I use ...
0
votes
0
answers
92
views
Local run Spark docker container failed due to org.apache.hadoop.security.KerberosAuthException
A project starts a local docker container - bitnami/spark:latest. The configuration on it is the simplest with all authentication related environment variable disabled. It can execute the simplest ...
0
votes
0
answers
81
views
IIS delegation of user identity when making API calls
I have the following setup.
A user using my MVC web app (.net framework 4.8) hits a button which triggers a controller. The controller then makes a call to an API which is hosted on the same web ...
0
votes
0
answers
86
views
OAuth2 kerberos spnego spring boot
I don't find any example with oauth2 and kerberos. There is example for casual security and kerberos https://github.com/spring-projects/spring-security-kerberos/tree/main/spring-security-kerberos-...
0
votes
0
answers
32
views
When using Broker Load with Kerberos configured and encountering the error 'Cannot locate default realm'
My error is from broker load then I load data from S3 to apache doris. The broker load is with Kerberos configured, and I have already configured the Kerberos in my doris, too.
The useful info is ...
0
votes
0
answers
57
views
In Kerberos Environment in case of constraint Delegation do we need to pass AuthIdentity to AcquireCredentialsHandle function SSPI
In case of Kerberos constraint delegation do we need to pass AuthIdentity correct credentials to AcquireCredentialsHandle function?
As per my understanding we need to pass AuthIdentity as NULL to
...