Configure mongodb authentication with kerberos on windows

[Rambo]

Hi,

    I setup a kerberos server on linux, and I want to setup a client on windows.

    When I run the command "mongod.exe KRB5_KTNAME=mongodb.keytab  --smallfiles --auth --setParameter authenticationMechanisms=GSSAPI,MONGODB-CR" to start mongodb server with auth, it throw "2014-08-08T13:58:38.420+0800 SEVERE: Failed global initialization: ProtocolError SASL(-1): generic failure: SSPI: AcquireCredentialsHandle: No credentials are available in the security package" error.

   I find windows does not provide the GSS API, just SSPI after investigated.  

  So I want to  know it's correct configure mongodb authentication with kerberos on windows use "GSSAPI" auth type?  Or give me some advise to setup that?

  Thanks for any help.

Thanks,

Rambo

   

[Stephen Steneker]

Hi Rambo,

Kerberos support is only available with a MongoDB Enterprise subscription: https://www.mongodb.com/products/mongodb-enterprise.

If your company already has an Enterprise subscription, you should have access to create CS issues in Jira.

If you are interested in trialling Enterprise, please contact me off list and I can direct your request appropriately.

Thanks,

Stephen

[Rambo]

Hi Stephen,

  Thanks for reply.

  I am using mongodb enterprise,  I have successful to setup the mongdb with kerberos on linux, but for windows have the  above mentioned issue.

  Can you give some give me some advice or some configure steps for auth mongodb with kerberos on windows (I have setup a kerberos server on linux)?

[Asya Kamsky]

Rambo,

What Stephen is saying is that since you have enterprise you also have commercial support subscription - you can open a case in the [commercial support project in MongoDB Jira|https://jira.mongodb.org/browse/CS] so that a support engineer can step through your problem and figure out what you need to do to get Kerberos working.

Asya

--

You received this message because you are subscribed to the Google Groups "mongodb-user"
group.
 
For other MongoDB technical support options, see: http://www.mongodb.org/about/support/.
---
You received this message because you are subscribed to the Google Groups "mongodb-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mongodb-user...@googlegroups.com.
To post to this group, send email to mongod...@googlegroups.com.
Visit this group at http://groups.google.com/group/mongodb-user.

To view this discussion on the web visit https://groups.google.com/d/msgid/mongodb-user/bfd000af-61db-4e54-84c1-defe329bbbc2%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[db...@tibco-support.com]

Ok, I got it.  For another question: Does mixed Kerberos communication support by MongoDB? E.g. Kerberos client in windows connect to Server in Linux, or Kerberos client in Linux connect to Server in Windows.

Thanks for any help.

Thanks,

Rambo