Questions tagged [kerberos]

Kerberos is a computer network authentication protocol which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner.

175 questions
30
votes
2 answers

Does Firefox support wildcards in NTLM / Negotiate URI's for autologin?

Following this question about Windows Domain Authentication with Firefox , does FF support using wildcards in the URI's? I'm not finding anything where it mentions support either way.
squillman
  • 8,796
25
votes
3 answers

Integrate kerberos and Keychain

It it possible to make kinit ask Keychain for password and not me?
tig
  • 4,813
13
votes
2 answers

Mount Mac OSX server NFS from Linux LDAP?

I'm trying to mount an NFS share from Fedora 16. The server is Mac OS X Server, set up by my coworker. I believe it requires Kerberos/LDAP authentication, so I would start the (probably arduous) process of getting that figured out, but there's some…
Chinasaur
  • 231
13
votes
2 answers

How does Kerberos' preauthentication increase security?

This FAQ entry (and the RFC itself) states that pre-authentication addresses a weakness in initial implementations of Kerberos that made it vulnerable to offline dictionary attacks. The FAQ state: The simplest form of preauthentication is known as…
Aidan Steele
  • 413
10
votes
4 answers

Google Chrome on Mac OS X with Kerberos

Is it possible to use Kerberized Websites with Google Chrome on Mac OS X?
loomi
  • 505
9
votes
2 answers

How to install/enable ktpass.exe on Windows 7?

How can I install or enable the ktpass.exe utility on a Windows 7 workstation?
RyanHennig
  • 241
9
votes
3 answers

Mount a Samba share using Kerberos ticket

I have a Samba server (which is the domain controller), and a Ubuntu 14.04 Client with a logged user who is authenticated by Kerberos (the client joined to domain with Likewise). The user want to access a network share with this command: mount.cifs…
mbalint987
  • 143
6
votes
4 answers

How to manually get a kerberos service ticket?

I've registred a SPN, now I want to try to get a ticket for it. I know there is linux kvno to do that is there an analog on windows?
MaxNevermind
  • 227
6
votes
1 answer

What is the advantage with using Kerberos per host?

We have several clusters and only (at most) 150+ hosts in our largest individual cluster. I see principals for service@domain and service/host@domain. I advocated for service@domain only to make administration easier, but I am met with an argument…
Hpoonis
  • 69
5
votes
1 answer

Cross realm kerberos authentication with ssh

How can I configure server wide cross realm authentication on an openssh server using kerberos without having to add principles for both realms in the .k5login file?
Iain Conochie
  • 195
5
votes
2 answers

Kerberos Server and logs

I'm attempt to set up a Kerberos server, and am running into some sort of issue with the configuration message. Unfortunately, the daemon refuses to tell me what went wrong; it tells me to "see log file", but never mentions what log file. # service…
Thanatos
  • 2,552
5
votes
2 answers

Can't connect to my server using SSH Kerberos Auth on OSX 10.7

I just upgraded my Mac OS to 10.7 Lion. It has worked well before. But, only kinit working normally now, I can't ssh to my server. After reinstalling the "Mac OS X Kerberos Extras", it didn't get better. My command: ssh root@10.3.18.211 -v ......…
deemstone
5
votes
1 answer

mount.cifs: Any way to mount with kerberos using the machine credentials

When a Linux machine joins a domain, a computer account is created in Active Directory. Can this account be used to mount a network share with cifs and Kerberos?
bbigras
  • 501
4
votes
2 answers

Is it OK to have kerberos-sec port open to the Internet in Mac OS X?

I’ve just bought my first Mac I want to connect it directly to the Internet in a colocation facility. Running nmap against it shows: Starting Nmap 6.40 ( http://nmap.org ) at 2015-02-18 21:54 GMT Nmap scan report for foo.bar (123.45.67.89) Host is…
fadedbee
  • 195
4
votes
1 answer

Accessing the user's Kerberos ticket from inside a VM?

I use VirtualBox to run a couple of Unix (Fedora and FreeBSD) VMs on a Windows-11 host. Every day I login to the host -- which gets me a new Kerberos ticket from domain controller -- and then have to do kinit inside the VMs to obtain (or renew) the…
Mikhail T.
  • 946
1
2 3
…
11 12