Questions tagged [Kerberos] (35)

1
answer

Whether actively use Linux LDAP/Kerberos of the company?

Hi all. If it make sense to devote time to study LDAP/Kerberos or it's better to spend time on other stacks? Just a vacancy, for example DevOps, never met in the stacks of LDAP and Kerberos is rare.
faustino40 asked March 30th 20 at 01:21
0
answer

Active Directory + Apache + mod_auth_kerb. As finished?

Greetings, colleagues! I ask your advice. The situation is as follows: Have a domain, have Apache module mod_auth_kerb. Customized transparent authentication (SSO). Everything works great, if not one "but". There is an authentication page on which you want to redirect the user if the user is not in the domain or simply coul...
1
answer

How to make axios Negotiate requests?

Hello! Please help to understand. In General, the situation is as follows. From a client application (Vue.js) is axios (ajax) request to the URL of the backend application (Golang), which vzaimodeistvie with Kerberos for SSO (single sign-on) authentication. When accessing the URL address you need to return information about...
German asked March 19th 20 at 19:27
1
answer

In Golang application to configure with Kerberos?

Hello, comrades! Please help to understand. The task following: at the request of the employee for a certain URL to return information about it. In other words, trying to implement SSO (single sign-on) into a Golang application using Kerberos and Active Directory. Found a library gokrb5, which sort of solves this problem. N...
kari_Ullri asked March 19th 20 at 18:46
0
answer

How to replace the domain during login, the kerberos on centos?

Welcome! Custom domain authorization for CentOS 6.10. Our domain is: very.long.domain.name. For simplicity, for users is configured ' authorization form username@company.name. Authorization works great for very.long.domain.name:#kinit UserName@VERY.LONG.DOMAIN.NAME or easier #kinit UserName However #kinit username@company.n...
1
answer

What's wrong with sasl/gssapi?

Good afternoon. Can't figure out how to fix this error please help SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: The context has expire (Success)
Vernon_Cummings asked March 16th 20 at 21:17
0
answer

How to configure kerberos Exchange (ews) on the website in iis without configuring the browser?

Building the website on asp.net mvc 5 on iis 7. Basic CRUD functionality with the events calendars of exchange users by 2016 EWS. The SPN is registered, Win authorization + impersonation is enabled on UseKernelMode, useAppPoolCredentials to false, Poole ApplicationPoolIdenity users all domain. In General, if the browsers ad...
alfredo_Doyle67 asked March 14th 20 at 15:39
0
answer

Squid3.5.20 + Kerberos + AD authorization error using ext_kerberos_ldap_group_acl?

Good day! The management has set a goal to raise the proxy server to run staff and monitoring visits through authorization on AD. The choice fell on squid3 + Kerberos + group lock using AD (ext_kerberos_ldap_group_acl). Got to do the first two, i.e. to raise squid + authorization via Kerberos to AD, but the lock using ext_k...
Austyn asked March 14th 20 at 14:41
2
answers

Failed to connect to exchange using kerberos authentication?

Hello! There was a commotion in Exchange 2010, the process of napiling was made the command winrm quickconfig. Most likely, after it to control exchangem it is impossible to connect. Along the way, was shamanism in IIS on the subject of other IP addresses. Can't find information on the Internet, maybe someone knows what to ...
Geovany.Morar23 asked March 13th 20 at 16:37
0
answer

How to solve the problem javax.security.sasl.SaslException: GSS initiate failed?

Hello. Trying to write a client for hive c windows 2012 R2 I HADOOP_HOME Environment for a prescribed next, the prepared codepublic static void main (String args[]) { try { org.apache.hadoop.conf.Configuration conf = new org.apache.hadoop.conf.Configuration(); conf.set("hadoop.security.authentication", "Kerberos"); UserG...
garrett_Weber asked March 13th 20 at 13:32