Description:
The Kerberos authentication server.
|
|
|
Maximum size of a Unix MIT Kerberos database backend
|
| |
Hi all, In our University I wish to centralize authentication in a Linux MIT KDC. This operation will spawn a KDC with about 30 000 principals. Is it a problem for Kerberos MIT implementation ? We will run the 1.6 version bundled with Debian Lenny. Is there a need for tricks to handle such a database ?... more »
|
|
|
Setting up local Kerberos network
|
| |
Hi all, I would like some information on how to set-up a small network of kerberos server and clients. I am planning to build secure network using Kerberos as a part of my Master's project. I have searched web and found nothing but topics related to some big institutions and companies where I will be... more »
|
|
|
Forwarding Krb5 credentials to backend server
|
| |
Hi, I'm trying to set up a Reverse-Proxy with WebAuth ([link]) for several backend servers running Apache2 with mod_auth_kerb. We use Kerberos internally for authentication and SSO works pretty well with mod_auth_kerb. What I would like now is to provide access to these internal servers from outside. I want the user to enter their corporate credentials once on WebAuth, and then generate Kerberos tickets for the backend servers. I use WebAuthCred ([link]) for that, and the credentials get stored in a cache, but the reverse-proxy doesn't forward these credentials, and I get a 401 error message back.... more »
|
|
|
Problem with mit2ms - Tickets are not transfered to LSA cache
|
| |
Hi, I'm currently facing a problem when implementing a kerberos based SSO solution with SAP on Linux and an Active Directory. Usually this works fine for ABAP and JAVA but in the current environment I have a different situation. On the client machine I need the kerberos credentials (TGT) to be stored in... more »
|
|
|
Invalid response for AS_REQ with win 2003 sever
|
| |
Dear team I ma trying to perfrom Kerberos PKINIT authnetication with windows 2003 server .the clinet is able to send AS_REQ packet but the server is responding with KRB5KRB_AP_ERR_MODIFIED .In RFC 4120 i could not find whether KRB5KRB_AP_ERR_MODIFIED is a proper error response for AS_REQ . In the MIT 1.6.3 soucre code in file Pkinit_crypto_openssl , in function... more »
|
|
|
Capitalization question
|
| |
Can I use capitalization in names used in kerberos domain? I am bumping into a issue when capital letters are used in domain but not in the hostname only. Details below. Needless to say all sort of other authentication also fails. [root@nf-ArkTEST-sto ~]# hostname nf-ArkTEST-sto.ArkTEST.name.co mpany.com... more »
|
|
|
Kerberos error - KDC reply did not match expectations
|
| |
I'm new to Kerberos and I have an issue in setting my AIX 5.3 system to authenticate against a Windows 2003 Active Directory server via Kerberos. I followed the instructions from the IBM website on Kerberos integration ([link] bm.aix.security/doc/security/k erberos_auth_only_load_module. htm).... more »
|
|
|
GSS-API errors
|
| |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have several perl routines that use the Authen::Krb5::Admin module, which is linked with MIT K5 1.6.3 libraries. When attempting multiple admin transactions, each of which involves a new connection to kadmind and which occur in rapid succession (many per second), my functions now and... more »
|
|
|
Kerberos/Apache receiving Active Directory user/password in plain text
|
| |
Hi all, We have a unix web server with Apache were we installed kerberos to implement single sign on. The idea with this is to have the ability of autenticating through the Windows Active Directory once not needing to log again in the unix box. After the setup, the autentication works. When we log in to the unix server, a popup window asks for user/pwd. After entering... more »
|
|
|
|
