All Questions
Tagged with single-sign-on kerberos
222
questions
0
votes
1
answer
841
views
In OAuth2 flow, can we delegate authentication to Windows SSO
We have an in-house OAuth2 server used by our applications. Now we want to use Windows SSO for our applications but without them to change anything: they'll still reach our OAuth2 server for an access ...
- 6,039
1
vote
1
answer
423
views
'Forbidden' response when running middleware with WSGI-Kerberos
For a web-application I am writing a middleware using the WSGI-Kerberos to handle the authentication. In general these efforts intend to implement the Single Sign-On technology. So, users that are ...
- 276
0
votes
1
answer
30
views
SSO and secondary user ID
Is there a way to integrate SSO with a secondary userID and not the windows login ID?
Suppose I login to the windows machine using my loginID abc. Then open a web browser and try to login a webapp ...
- 589
2
votes
1
answer
531
views
What is the use of the pre-auth user in SPNEGO SSO configuration?
I'm using SPNEGO in order to implement SSO solution. During the configuration, I was required to use domain user credentials in 2 steps:
In the web.xml of my application:
<init-param>
&...
- 31
0
votes
1
answer
1k
views
Kerberos Delegation and Authentication: Impact due to Domain change
[I'm fairly new to Kerberos Protocol]
We have a customer, who back in 2020 was using a domain let's call it customdom.itm, which has a user account krb-test-cd setup for Kerberos delegation and this ...
- 239
1
vote
1
answer
3k
views
Silent proxy-authentication via NTLMv2 and Kerberos
My customer's Java-code (fat client) needs to access web-services through a network-proxy. The network-proxy requires authentication. The customer expects silent authentication as the current Windows-...
- 324
0
votes
1
answer
392
views
SSPI: acquire credentials for another user from a process running with local admin privileges
I am running a process with loacl admin privilege in Windows and trying to obtain a credential handle for another user using AcquireCredentialsHandle .
It is possible to pass in ...
- 184
2
votes
0
answers
2k
views
Error from RemoteAuthentication: OpenIdConnectAuthenticationHandler: message.State is null or empty
Error from RemoteAuthentication: OpenIdConnectAuthenticationHandler: message.State is null or empty.. even after getting the code, id_token and token successfully.
I am using Razor pages along with ....
- 165
1
vote
2
answers
70
views
How do internal websites on corporate networks automatically authenticate the users?
In a corporate environment when a user logs onto their laptop they can be automatically authenticated for internal websites.
How is this implemented? How does the website and browser know who the user ...
- 8,717
2
votes
1
answer
2k
views
SSO with Kerberos
I am trying to do authentication with Kerberos and the Python flask-kerberos module.
Basically this is my code:
DEBUG=True
app = Flask(__name__)
app.config.from_object(__name__)
os.environ['...
- 47
0
votes
1
answer
8k
views
Configuring Tomcat SSO using Kerberos SPNEGO
I am trying to configure SSO in Tomcat 9 (with SDK 8) using Kerberos. My environment is all in Windows Server 2016 VMs:
-
server2016.forestgump.internal 192.168.44.130 - Active Directory
...
- 817
0
votes
1
answer
246
views
Do we require a keytab entry for all AD users for kerberos based authentication?
I have a web application deployed on jboss. As of now we have implemented NTLMHttpFilter provided by https://www.jcifs.org/. As this java filter supports only NTLMV1, now i need to update my ...
0
votes
1
answer
599
views
IBM Client Side SSO P8 Filenet Kerberos .Net C# Not Working
I am trying to get the SSO Kerberos example code from the info center for P8 Filenet working:
https://www.ibm.com/support/knowledgecenter/SSGLW6_5.5.0/com.ibm.p8.ce.dev.ce.doc/sec_procedures.htm#...
- 1,141
0
votes
1
answer
1k
views
Jmeter script for SSO authentication in Kerberos (Windows)
I am trying to implement a Jmeter script (jmeter version 5.1)for SSO functionality with Kerberos.
I have done the set-up in the krb5 and jass conf files and have also updated HTTP Authorization ...
- 69
1
vote
0
answers
185
views
kinit command error, while generating a TGT- SPNEGO
I got error 6 client not found in kerberos database error while running kinit command.
Can you help me with the possibilies of this error?
We are implementing SSO on our application using SPNEGO.
...
