I am struggling to authenticate to a Java web container (I've tried both Tomcat and Jetty) when running on Windows 2012. Every time I try the Negotiate auth scheme I get an error: org.ietf.jgss.GS...

In order to do client-side HTTP SPNEGO authentication with Java on Windows you need to set the Windows Registry key allowtgtsessionkey. This is well documented. What I do not understand is how peop...

Microsoft introduced a 'LdapEnforceChannelBinding' option requiring clients to provide channel binding information in order to connect to AD over SSL/TLS. After this has enabled in AD, Java applica...

I'm trying to bind to an Active Directory server with GSS on a Windows computer that is logged in as a domain user. Normally, this works fine. But when signing and binding is being enforced (see ht...

i am trying to use windows authentication in linux docker container under kubernetes. I am following this settings: https://learn.microsoft.com/en-us/aspnet/core/security/authentication/windowsaut...

I am trying to implement SASL bind over GSSAPI using Kerberos credentials with the ldap_sasl_bind_s() function. I follow the steps described in the ldap_sasl_bind_s(GSSAPI) - What should be provide...

I am currently trying to get the gssapi module for python to run on windows. My goal is to authenticate with an Active Directory using python module ldap3. gssapi is an requirement for this to work...

I have written some code to validate a client's kerberos ticket on my server. I have also written unit tests for my classes. The unit tests are written by mocking the calls to the GSS library class...

I am trying to install the GSSAPI module through pip but I receive this error that I don't know how to resolve. Could not find main GSSAPI shared library. Please try setting GSSAPI_MAIN_LIB yourse...

How does authentication and logon work on Windows with Kerberos? What I want to achieve is to logon a user on a server and run a process for that user. As a first step, I create a Kerberos ticket...

I am trying to make a windows client authenticate with a Linux server in a domain-joined scenario, I have created a service principal based on the documentation provided as part of PBIS/gssapps and...

Edit : Issue finally solved. The detail can be found in the troubleshooting part at the end of this message. I leave the detailed steps here in case it could help somebody. Setup OpenLDAP I - Cr...

Over the last few days I have built a proof-of-concept demo using the GSS-API and SPNEGO. The aim is to give users single-sign-on access to services offered by our custom application server via Htt...

I am using the Connect() method in the Ssh Java class below in order to connect to a server using SSH (JSch) and running a command in the server. The problem is that when running Connect() t...

so it's me again with some AD and Kerberos problems. Alright cool, I get a kerberos token from the WWW-Authenticate header. Now I want to verify this token against an AD but I don't know how. I ...

I'm trying to perform NTLM bind using JAVA GSSAPI. I'm receiving this error: javax.naming.AuthenticationException: GSSAPI [Root exception is javax.security.sasl.SaslException: GSS initiate fail...

I have the following code: public static void main(String args[]){ try { //String ticket = "Negotiate YIGCBg...=="; //byte[] kerberosTicket = ticket.getBytes(); byte[] kerberosTicket = Base64....

I'm setting up openLDAP with SASL authentification with kerberos. I got problem with this auth. First, I get the kerberos ticket with kinit. When I make a klist, the ticket is displayed. So, no pr...

Scenario: Windows server in a AD domain hosting a Subversion repository using SVNSERVE only (no Apache), and not VisualSVN. Objective: Authenticate users to the Subversion repository via SASL thro...

I had to "sporadically" work with Heimdal / MIT Gssapi for kerberos authentication over past couple of years. I had to build an application that was to be used as a web-service running on a L...

As I understand it, SPN is an authenticating tool for windows services. Kerberos is a user authentication service SPNEGO-GSSAPI is the third party API to be able to use those services. SSPI : i...

I'm now kerberizing a cross-platform application with GSSAPI. While I'm not clear about the difference between UPN and SPN. The development environment is a Samba4 AD DC server on CentOS 6.4 with ...

i am try to login kerberos kdc from Java. But Java is throwing exception. Seems like login is successful but something is stops login. I dont know why ? Someone have solution for this problem? Her...

I'm working with an LDAP in forest architecture (all servers and my server are windows). I'm binding to the AD using NTLM authentication. I have a Java code that perform the operations against the ...

I've got a Java client app and a Java server app, and I'm trying to authenticate to the server via Kerberos. The client basically uses http-components and SPNEGO to make a HTTP GET call, but I alwa...