Questions tagged [Kerberos] (35)

Hi all. If it make sense to devote time to study LDAP/Kerberos or it's better to spend time on other stacks? Just a vacancy, for example DevOps, never met in the stacks of LDAP and Kerberos is rare.

Greetings, colleagues! I ask your advice. The situation is as follows: Have a domain, have Apache module mod_auth_kerb. Customized transparent authentication (SSO). Everything works great, if not one "but". There is an authentication page on which you want to redirect the user if the user is not in the domain or simply coul...

Hello! Please help to understand. In General, the situation is as follows. From a client application (Vue.js) is axios (ajax) request to the URL of the backend application (Golang), which vzaimodeistvie with Kerberos for SSO (single sign-on) authentication. When accessing the URL address you need to return information about...

Hello, comrades! Please help to understand. The task following: at the request of the employee for a certain URL to return information about it. In other words, trying to implement SSO (single sign-on) into a Golang application using Kerberos and Active Directory. Found a library gokrb5, which sort of solves this problem. N...

Welcome! Custom domain authorization for CentOS 6.10. Our domain is: very.long.domain.name. For simplicity, for users is configured ' authorization form username@company.name. Authorization works great for very.long.domain.name:#kinit UserName@VERY.LONG.DOMAIN.NAME or easier #kinit UserName However #kinit username@company.n...

Good afternoon. Can't figure out how to fix this error please help SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: The context has expire (Success)

Building the website on asp.net mvc 5 on iis 7. Basic CRUD functionality with the events calendars of exchange users by 2016 EWS. The SPN is registered, Win authorization + impersonation is enabled on UseKernelMode, useAppPoolCredentials to false, Poole ApplicationPoolIdenity users all domain. In General, if the browsers ad...

Good day! The management has set a goal to raise the proxy server to run staff and monitoring visits through authorization on AD. The choice fell on squid3 + Kerberos + group lock using AD (ext_kerberos_ldap_group_acl). Got to do the first two, i.e. to raise squid + authorization via Kerberos to AD, but the lock using ext_k...

Hello! There was a commotion in Exchange 2010, the process of napiling was made the command winrm quickconfig. Most likely, after it to control exchangem it is impossible to connect. Along the way, was shamanism in IIS on the subject of other IP addresses. Can't find information on the Internet, maybe someone knows what to ...

Hello. Trying to write a client for hive c windows 2012 R2 I HADOOP_HOME Environment for a prescribed next, the prepared codepublic static void main (String args[]) { try { org.apache.hadoop.conf.Configuration conf = new org.apache.hadoop.conf.Configuration(); conf.set("hadoop.security.authentication", "Kerberos"); UserG...