3,567 questions
161
votes
63
answers
800k
views
The target principal name is incorrect. Cannot generate SSPI context [closed]
I am struggling to get a SQL Server connection from machine A to machine B which is running the SQL Server.
I have Googled extensively and all the things I have found have not worked. Nor do they ...
- 10.2k
1
vote
0
answers
27
views
Hadoop Kerberos client fails on WildFly with "Parameter 'callbackHandler' may not be null" (Elytron SASL GSSAPI)
I am running a Hadoop HDFS client inside WildFly and connecting to a Kerberos-secured HDFS cluster.
Environment:
- WildFly 34 (bootable JAR)
- Java 17
- Hadoop client 3.x
- Kerberos authentication ...
- 11
0
votes
1
answer
41
views
apache auth-kerb and a user list to allow doesnt work
I guess the solution is quite easy, but I just dont see the point:
We had a kerb auth working, but s'one destroyed it quite a while ago.
Now I dont get it working again:
kerb authentication works and ...
- 374
1
vote
2
answers
133
views
Kerberos: Verifying TGS using NodeJS
I'm building a single-sign-on solution where:
A user boots up their Active Directory–joined Windows machine.
My app auto-starts after the Winlogon event.
Since the user already has a TGT from logon, ...
- 51
0
votes
1
answer
159
views
Kerberos "Ticket not yet valid" error when verifying service ticket in Node.js server
I am using the kerberos Node.js library to verify Kerberos service tickets. My setup includes:
Active Directory Windows Server on the network.
Linux server that verifies service tickets received from ...
- 51
1
vote
1
answer
371
views
How I can generate correct SPNEGO token from existing kerberos token using pyspnego?
I am trying to solve the problem of accessing a service (HTTP) using the kerberos constrained delegation mechanism. It seems that I am forming the kerberos ticket correctly, but at the same time ...
- 29
1
vote
2
answers
221
views
How to use a cached Kerberos TGS ticket with GSS API in Java?
I am trying to get a Kerberos TGS ticket from the cache (without contacting the KDC).
I create a TGT ticket using kinit and a TGS ticket, using kvno cifs/.
To ensure I have cached the tickets, I use ...
- 31
0
votes
1
answer
48
views
flink on yarn, ContainerLocalizer download locally file failed
I submit a Flink job to Hadoop-Yarn, and use Flink application mode. Everything is normal on the client side, but the app master starts failing on the NodeManager, with the following logs.
...
- 11
1
vote
1
answer
221
views
Firefox doesn't show the kerberos challenge
I'm building an app behind IIS. IIS manages authentication and reverse proxy to my app.
in IIS :
anonymous Authentication disabled
Asp.net impersonation disabled
Windows authentication enabled, ...
- 181
1
vote
1
answer
91
views
Kerberos authentication with SPNEGO in Swift
I am trying to build a MacOS application can manage calls to protected resources using kerberos authentication. In a browser, that's the seamless authentication which works easily (using the WWW-...
- 333
2
votes
2
answers
449
views
Oracle UCP exception (ORA-12631) in Oracle 19c with kerberos authentication
I have a Oracle 19c system on Linux with krb5 auth enabled using Windows AD KDC. Both sqlplus and jdbc access are working fine. When I tried to test with ucp (ucp11.jar, ojdbc11.jar), I ran into ORA-...
- 21
1
vote
0
answers
223
views
Problem with MSLSA to use TGT session key from ticket Kerberos and use sqlplus or sqldeveloper
I would like to change in my file sqlnet.ora from OSMSFT:// to MSLSA: to integrate Microsoft security.
The problem come when I try to open a database in with authentification Kerberos like :
sqlplus /@...
- 49
1
vote
2
answers
408
views
Unable to connect to remote windows server: Ansible
Trying to run basic Ansible Windows module on a remote Windows server and receiving the error displayed below:
"unreachable": true,
"msg": "ntlm: HTTPConnectionPool(host='...
1
vote
0
answers
235
views
Creating Kerberos credentials cache - Oracle VS Code
I've been working on getting the Oracle VS Code extension set up. I have an Oracle client that uses Kerberos authentication (note that this is a company-managed laptop, I do not have admin access)
I'm ...
- 21
0
votes
0
answers
81
views
IIS delegation of user identity when making API calls
I have the following setup.
A user using my MVC web app (.net framework 4.8) hits a button which triggers a controller. The controller then makes a call to an API which is hosted on the same web ...
- 521