Kerberos is a computer network authentication protocol which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner.

learn more… | top users | synonyms

8
votes
1answer
666 views

Mount Mac OSX server NFS from Linux <krb5> LDAP?

I'm trying to mount an NFS share from Fedora 16. The server is Mac OS X Server, set up by my coworker. I believe it requires Kerberos/LDAP authentication, so I would start the (probably arduous) ...
2
votes
1answer
603 views

XP MODE: the time on this PC and the current time on the network are different

Some folks were monkeying around with the Time service and Kerberos on our Windows 2003 network domain controllers last night, and today I cannot boot up XP Mode on my Windows 7 desktop. I've rebooted ...
1
vote
1answer
145 views

Kerberos failure emergency: need to filter a Wireshark capture to show only Kerberos and SPNEGO traffic

I am attempting to troubleshoot a serious Kerberos authentication problem on our SBS 2003 domain (none of our Windows 7 or XP workstations can authenticate). We have logged failed Kerberos ...
1
vote
1answer
477 views

kinit gives me a Kerberos ticket, but no AFS token

I'm trying to setup access to my university's IT environment from my laptop running Ubuntu 12.04, by (mostly) following the IT-department's guides on AFS and Kerberos. I can get AFS working well ...
1
vote
1answer
671 views

Changing remote server date via Powershell

I need to change the date of a server to the next day then run a sql script and then change the server date back. I figured out how to change the server date via powershell Invoke-Command ...
0
votes
1answer
166 views

For password protected Samba share on home network, ntlm vs ntlmv2 vs krb5 (kerberos)?

I have a home network with wifi that is password protected. On my home network, I have a file server with a password protected Samba share. The share itself is protected because my network has ...
0
votes
1answer
1k views

Time Machine over network using incorrect realm for kerberos authentication

Question: how can I influence the kerberos realm that Time Machine, or more specifically NetAuthSysAgent, uses? Time Machine backups over the network are failing on OS X 10.7 / 10.8 clients except ...
0
votes
1answer
1k views

Directly printing to remote CUPS/IPP server on Snow Leopard

I need to use Kerberos authentication when printing from my OSX machine, however, the machine itself does not have a service account in active directory, so the KDC will not issue a delegation ticket ...
2
votes
0answers
874 views

How to install/enable ktpass.exe on Windows 7?

How can I install or enable the ktpass.exe utility on a Windows 7 workstation?
2
votes
0answers
5k views

Likewise on Ubuntu - domain user sometimes disappears from Login Screen

I'm using Likewise to authenticate to a Windows Domain on a laptop running Ubuntu 10.04. Everything seems to be working well, except for one thing. Normally, after the machine boots, I am presented ...
1
vote
0answers
38 views

What goes on when using kinit with a keytab file

Wish to get more understanding on the use of kinit and keytab file. For example, if I already have a keytab file generated for a service ( the service registered to active directory by ktpass -mapuser ...
1
vote
0answers
69 views

Make ecryptfs work on kerberos secured nfs4-share

I have a working single-signe-on setup using Kerberos and openLDAP. I have setup NFS4 to use this infrastructure to control access to the shared folders. This works perfectly fine. The NFS4 sever ...
1
vote
0answers
344 views

Thousands of Logon/Logoff requests in Windows Event Viewer from a different computer on the same domain

For the past month or so, a computer that is on the same domain as me has been spamming my computer with logon/logoff requests via kerberos. I get ~4,000 requests on my computer a day. This includes ...
1
vote
0answers
575 views

Kerberos events are not logged on Windows 7

I tried to configure Windows 7 machine with our web-server running on it to log Kerberos-related events (meaning Windows system Log). I followed these instructions: How to enable Kerberos event ...
1
vote
0answers
1k views

Macos X 10.6 not refreshing Kerberos TGT key

I observed that MacOS X 10.6, if machine is added to an Active Directory and set to authenticate over LDAP to the Active Directory server requests a Kerberos TGT as expected at each user login. ...
0
votes
0answers
21 views

Starting rpcgssd on CentOS 7

I'm running CentOS 7.0.1406, and have problems with NFSv4, authenticating using krb5p. Neither idmapd nor gssd would start automatically. I could fix the former by doing systemctl enable nfs-idmap. ...
0
votes
0answers
39 views

List of setspn service classes and their meanings

I am trying to set up my Java tomcat service to be authenticated using Kerberos (Negotiate SSO) in MS AD. For this it is necessary to create SPN. In the documentation of setspn on ...
0
votes
0answers
48 views

Cannot connect via SecureCRT using Kerberos on Windows

I am running a Windows 8 64-bit desktop and need to connect via SSH to a work server using Kerberos. I can authenticate successfully against my work's Kerberos system but I cannot get SecureCRT to ...
0
votes
0answers
21 views

How to manually get a kerberos service ticket?

I've registred a SPN, now I want to try to get a ticket for it. I know there is linux kvno to do that is there an analog on windows?
0
votes
0answers
40 views

Authenticating svn+ssh commits from Windows 7 with kerberos token

I am developing on a Windows 7 machine and need to commit my visual studio 2010 projects into the primary repository here at work. I installed AnkhSVN, set it up as my plugin choice for VS, and ...
0
votes
0answers
83 views

Kerberos authentication failure: “SAM Active Directory Response - user unknown”

Everyone on our network is currently unable to access shared resources on our file server (SBS 2003 server with Windows 7 & XP workstations). A Wireshark packet capture revealed the following ...
0
votes
0answers
42 views

Linux Kerberos 5 server services and utilities stopped functioning: hash: could not retrieve header

I have been installing Kerberos 5 server on RHEL6 for some integration work. Installed yesterday and created admin principals which all seemed to work. Today I stopped the services, before trying to ...
0
votes
0answers
93 views

Convert cain & Abel KERBEROS Pre-Auth Hash to John The Ripper format

I got the following KERB5 pre-auth hash from CAIN software: slma.com\keith FA1CA9F0C2384A6FF00BEC993B8182B1030C7480D8F2EFBA6AD9179E7C130EC2EDB256227317C58D313215246E15733011A10402 I am using John ...
0
votes
0answers
410 views

Can't perform Kerberos login

I can't do a Kerberos login. I've tweaked rsyslog to record *.debug to /var/log/debug, whose output is below. If I attempt to log in with ssh, I get: Jun 6 23:13:05 foo-machine sshd[13965]: ...
0
votes
0answers
185 views

Samba file shares - ownership of folder accessible for 1 group verified by MS active direcctory

I have a machine set up to share a folder /srv/sambashare, here's an exerpt of the config file: [share] path = /srv/sambashare writable = yes The permissions of that folder are set at 700 ...