Questions tagged [spnego]
The spnego tag has no summary.
22 questions
5
votes
1
answer
610
views
I can't secure an URL using NGINX SPNEGO module
I would like to use the NGINX SPNEGO module to enable Kerberos authentication. For that, I compile the SPNEGO module using SPNEGO's git repository and NGINX version 1.28.1 in a builder docker image, ...
- 53
0
votes
1
answer
2k
views
Windows Kerberos authentication and network protocols/ports
Got the following question. I have a windows forest A with a root domain A. A web server in domain A has a proper setup SPN. A user comes from another forest/domain, where a 2way transitive forest ...
- 21
0
votes
1
answer
1k
views
Cross-realm Kerberos/SPNEGO configuration with multiple domain controllers and multiple application servers
I am currently struggling to scale my one-to-one simple Kerberos/SPNEGO configuration for multi-server environment and looking for some help.
Let's say
I have two Active Directory domains and two ...
- 1
0
votes
0
answers
662
views
Kerberos SPNEGO negotiation with OIDC under FastAPI REST application?
We have a REST-based application (non-browser application) that uses Kerberos-based SPNEGO authentication, and which has been working with Flask. We want to convert this application to run under ...
- 320
1
vote
0
answers
3k
views
SSO not working between a browser and a Keycloak using an user federation with kerberos integration to a windows AD
I am trying to get SSO working using a browser(Chrome or firefox) and keycloak configured with an user federation AD Domain(kerberos is configured).
First I present the overview of what I have and ...
- 11
0
votes
1
answer
2k
views
Windows Authentication with OpenID Connect (OIDC) with Active Directory (AD FS)?
This is NOT about Azure, but about an on-premises offline Microsoft Active Directory system, based on Windows 2016/2019.
Our website uses OpenID with Microsoft Active Directory, but we want the user ...
- 272
0
votes
1
answer
246
views
OpenCms: Kerberos SSO authentication with httpd+Tomcat
I have a standalone httpd+Tomcat 8.5.65 installation on OpenJDK 11 with OpenCms 11.0.2 for my client's internal website.
They have a LDAP network and they're requesting the automated logon using ...
- 101
0
votes
1
answer
238
views
Subversion repository throws HTTP 403 Bad Request when accessed via https & Kerberos (Windwos Integrated) authentication
We encountered this problem with different versions of OS & Subversion on the server side, the following details being the same:
We used https protocol to access the SVN repositories.
We used ...
- 163
0
votes
0
answers
6k
views
The Kerberos client received a KRB_AP_ERR_MODIFIED error from server
I have a situation where Kerberos authentication is failing.
I have checked that the SPN is registered under the correct AD user account that runs the service that needs to use Kerberos to ...
- 119
1
vote
1
answer
850
views
Kerberos - TCP client wants 1195725856 bytes, cap is 1048572
I'm having some difficulties debugging this error. I'm running nginx as an api gateway built to make a sub-request to kerberos whenever an endpoint gets called using the SPNEGO method. But whenever I ...
- 11
1
vote
1
answer
5k
views
WebSphere SPNEGO - Cannot get credential from JAAS Subject for principal
PROBLEM
I get an error trying to enable SPNEGO on the WebSphere application server (WAS ND, single node) 9.0.0.7 . I have succeeded on another server, but for this one I can't find the problem.
I ...
- 121
1
vote
2
answers
1k
views
Machine Account Password Resets on server and invalid Kerberos tickets on client
According to this TechNet article https://blogs.technet.microsoft.com/askds/2009/02/15/machine-account-password-process-2/ Machine Accounts (Computer Objects) reset internal passwords every 30 days.
...
- 141
1
vote
3
answers
12k
views
Httpd LimitRequestFieldSize not taken into account
I have a problem configuring httpd to accept large SPNEGO authentication headers.
The request work fine with Authorization header line of up to at least 5674 bytes but break with Authorization header ...
- 111
2
votes
0
answers
975
views
Delegation works on some browsers but not on others
I've been trying to make Kerberos delegation work across all browsers, but I'm having no luck. I'm running a Java web server on Linux and Windows.
Firefox (64 bit) on Linux: Receive the ticket and ...
- 21
0
votes
1
answer
698
views
Shibboleth SPNEGOAuthnConfiguration in CentOS server
I have requirement were the user's were already joined to domain logged in using the same credential from ldap server, they don't want to enter it again to login into shibboleth SSO, so I searched ...
- 61