Kerberos is a computer network authentication protocol which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner.

learn more… | top users | synonyms

5
votes
3answers
4k views

Google Chrome on Mac OS X with Kerberos

Is it possible to use Kerberized Websites with Google Chrome on Mac OS X?
1
vote
1answer
820 views

Kerberos events are not logged on Windows 7

I tried to configure Windows 7 machine with our web-server running on it to log Kerberos-related events (meaning Windows system Log). I followed these instructions: How to enable Kerberos event ...
1
vote
1answer
115 views

Why can I see two distinct /tmp dirs?

Problem I am seeing two different /tmp directories. In a plain GNOME terminal ls -lia /tmp gives the following: total 136 5797 drwxrwxrwt 36 root root 780 Oct 5 20:57 . 2 drwxr-xr-x 21 ...
0
votes
2answers
1k views

Active directory Kerberos OSX problems

I'll try to keep this short, but informative. I'm currently unable to bind OSX lion (10.7.4) machines to our AD. OSX kerberos (heimdal) is unable to locate the KDC service. However i can bind ...
1
vote
1answer
784 views

kinit gives me a Kerberos ticket, but no AFS token

I'm trying to setup access to my university's IT environment from my laptop running Ubuntu 12.04, by (mostly) following the IT-department's guides on AFS and Kerberos. I can get AFS working well ...
0
votes
0answers
204 views

Samba file shares - ownership of folder accessible for 1 group verified by MS active direcctory

I have a machine set up to share a folder /srv/sambashare, here's an exerpt of the config file: [share] path = /srv/sambashare writable = yes The permissions of that folder are set at 700 ...
1
vote
1answer
666 views

Error during configuring kerberos5 using macports

While trying to install libmemcached via MacPorts, I hit the following issue: libmemcached @0.40 +universal ---> Computing dependencies for libmemcached ---> Dependencies to be installed:...
2
votes
1answer
2k views

Windows: Obtain Kerberos TGT from another principal

I'm looking for a way to obtain a tgt (ticket granting ticket) from a second kerberos principal. In my job I work with a regular PC (member of AD) from our university's it departement but I also ...
13
votes
3answers
3k views

Integrate kerberos and Keychain

It it possible to make kinit ask Keychain for password and not me?
2
votes
1answer
736 views

XP MODE: the time on this PC and the current time on the network are different

Some folks were monkeying around with the Time service and Kerberos on our Windows 2003 network domain controllers last night, and today I cannot boot up XP Mode on my Windows 7 desktop. I've rebooted ...
1
vote
1answer
969 views

Changing remote server date via Powershell

I need to change the date of a server to the next day then run a sql script and then change the server date back. I figured out how to change the server date via powershell Invoke-Command -...
5
votes
2answers
8k views

Can't connect to my server using SSH Kerberos Auth on OSX 10.7

I just upgraded my Mac OS to 10.7 Lion. It has worked well before. But, only kinit working normally now, I can't ssh to my server. After reinstalling the "Mac OS X Kerberos Extras", it didn't get ...
0
votes
1answer
870 views

get kerberos ticket for autologin on linux

I tried to configure an automatically login for a user with kerberos. I tried using 'mingetty --autologin USERNAME', but gives me a session without a kerberos ticket (which i require to access some ...
1
vote
3answers
237 views

How am I able to check emails on outlook in my office windows machine without entering password

I have a basic question. At work, I log on to a domain from my work machine using a password. Then, once I am logged-in, I can read mails in outlook without having to enter any password. What I ...
1
vote
0answers
2k views

Macos X 10.6 not refreshing Kerberos TGT key

I observed that MacOS X 10.6, if machine is added to an Active Directory and set to authenticate over LDAP to the Active Directory server requests a Kerberos TGT as expected at each user login. ...
0
votes
1answer
781 views

Mac OS X 10.6 Kerberos authentication for network shares

I'm on a kerberos network, and I want to add someone's network kerberos username to one of my shared folders on my mac. On windows, assuming you were on the same domain, you could just type in the ...
7
votes
2answers
8k views

How does Kerberos' preauthentication increase security?

This FAQ entry (and the RFC itself) states that pre-authentication addresses a weakness in initial implementations of Kerberos that made it vulnerable to offline dictionary attacks. The FAQ state: ...
1
vote
1answer
415 views

Default Kerberos realm

I was following the instructions to install Samba from their website, and it said I needed to install the package krb5-user. So I typed: sudo apt-get install krb5-user It started installing, and ...
2
votes
0answers
6k views

Likewise on Ubuntu - domain user sometimes disappears from Login Screen

I'm using Likewise to authenticate to a Windows Domain on a laptop running Ubuntu 10.04. Everything seems to be working well, except for one thing. Normally, after the machine boots, I am presented ...
1
vote
1answer
1k views

Can't chgrp in NFS4 mounts

I'm using Linux in a large multi-user network. Let A be some group which I'm am member of, but which is not my primary group. According to chmod(2) I should be able to chgrp a file to group A. Trying ...
0
votes
1answer
2k views

Directly printing to remote CUPS/IPP server on Snow Leopard

I need to use Kerberos authentication when printing from my OSX machine, however, the machine itself does not have a service account in active directory, so the KDC will not issue a delegation ticket ...
0
votes
3answers
3k views

Windows Vista and 7 crossrealm authentication MIT Kerberos

I'm using Windows Server 2008 and Windows Vista and 7 for cross realm authentication using MIT Kerberos 1.6 but when i try to login with a user the KDC answers: (wireshark output) error_code: ...
19
votes
2answers
15k views

Does Firefox support wildcards in NTLM / Negotiate URI's for autologin?

Following this question about Windows Domain Authentication with Firefox, does FF support using wildcards in the URI's? I'm not finding anything where it mentions support either way.