krb-error 30 error code:KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN Server Name(Unknown) HTTP/Null

I have searched many blog posts but could not get any solution. I have seen many posts with a similar kind of error but in their case Server Name: HTTP/Domain Name I was able to get ticket for the...

Is there a way in Java or a command-line util to obtain a Kerberos ticket for a service using the native SSPI API?

I want to implement Single Sign On with Kerberos in Java and have successfully managed to create a ticket for the Service using the ticket from the Windows logon. Unfortunately, I can only create...

Windows support of native GSS-API in Java 6

From http://java.sun.com/developer/technicalArticles/J2SE/security/#3: Note: These two system properties are ignored when applications run on operating systems that do not yet support this...

How do I configure IIS so that the user's domain credentials are used when connecting to SQL server?

We've recently released the latest version of our intranet application, which now uses windows authentication as standard, and needs to be able to connect to a configured SQL server with the...

JVM crash :- Problematic frame: # V [libjvm.so+0x546720]

Production server has gone down and the preliminary analysis find that it has encountered a JVM crash. The jboss server log and GC log seems to be ok. And the jvm error log mention the...

Get active sessions with wmi (Win32_LogonSession returns also inactive/old sessions)

Is there a way to show only active sessions with wmi? The problem is that Win32_LogonSession shows also inactive/disconnected sessions. ManagementScope scope = new...

SPNEGO settings for Firefox and Google Chrome

I'm trying to configure Google Chrome and Firefox to work via SPNEGO/Kerberos with IBM WebSphere Portal 6.1 on WAS7, when the client is in a domain other than the one in which need to log in. In...

SQL server service fails to start

I have been trying to start the sql server from last 12 hours but not quite sure what is happening. I got the error 1814 which is 'not sufficient space for tempdb' but I have 60GB of data in C:...

How do people make Java SPNEGO client work in Windows?

In order to do client-side HTTP SPNEGO authentication with Java on Windows you need to set the Windows Registry key allowtgtsessionkey. This is well documented. What I do not understand is how...

PHP Kerberos: Check for valid ticket/Access the ticket

We have an apache2-server using Kerberos for website-authentication via Active Directory. On the website i use the Drupal-Framework and the unsupported "Kerberos Authentication"-Module...

How to use Kerberos in a NodeJS server?

I need to migrate a .net kerberos application to a nodejs environment. The application currently takes an incoming request from a .net client and based on the domain and user within domain they...

'Negotiate'. The authentication header received from the server was 'Negotiate,NTLM'

I am using Windows Authentication Mode/Negotiate Server 2012R2 - IIS8.5. windows authentication and asp.Net impersonation is on WebServer is calling an ASMX on serviceServer In case if site is...

Remotely joining computer to domain using powershell and WMI

For a CI/CD environment I am building a PowerShell script to create an new Hyper-V VM which is basically a clone of a 'base-vm'. This base-vm is not a member of the domain, it is a Windows...

When using --negotiate with curl, is a keytab file required?

The documentation describing how to connect to a kerberos secured endpoint shows the following: curl -i --negotiate -u : "http://<HOST>:<PORT>/webhdfs/v1/<PATH>?op=..." The -u flag has to be...

Java client and Kerberos / SSO - Krb5LoginModule - not re-using tickets

I'm running JMeter which depends on JDK 1.8's Krb5LoginModule. It seems to me that the Krb5LoginModule can't maintain a kerberos session across multiple requests. This results in a HTTP 401 and...

curl: how to use Kerberos instead of NTLM authentication on Windows?

I'm trying to connect to a Livy REST service under Kerberos security. On Linux CentoS curl works fine with negotiate, after receiving a Kerberos kinit ticket the connection through curl...

PyCharm overwrites PYTHONPATH in a docker container being used as an interpreter

I have a docker image containing various bits, including Spark. Here is my Dockerfile: FROM docker-dev.artifactory.company.com/centos:7.3.1611 # set proxy ENV http_proxy...

JAAS - fails to persist Kerberos ticket to cache file, and unable to create cache from scratch.. and other details

I'm developing a Java application that performs authentication with JAAS, should work as follows: (i) when the ticket for user uclient is already in local cache it should authenticate the user...

Can't get Kerberos realm

I am new to Kerberos/hive, want to connect hive (Kerberos implemented) using JDBC. > > org.apache.hadoop.conf.Configuration conf = new > > org.apache.hadoop.conf.Configuration(); > > ...

Zoo keeper SASL security

I'm using zookeeper 3.4.12 version and when trying to enable SASL found below error. Can someone help on this. Client { com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true ...

Squirrel-SQL throws class not found exception

I am running Squirrel-SQL version 3.9.0 using JDK 10 on MS-Windows 10. I have configured the Microsoft SQL server JDBC driver sqljdbc42.jar along with it's native DDLs to enable native kerberos...

PHP CURL - cURL error 35: error:1414D172:SSL routines:tls12_check_peer_sigalg:wrong signature type

I want to make a curl request in PHP 7.3.90 curl -V curl 7.64.0 (x86_64-pc-linux-gnu) libcurl/7.64.0 OpenSSL/1.1.1d zlib/1.2.11 libidn2/2.0.5 libpsl/0.20.2 (+libidn2/2.0.5) libssh2/1.8.0...

How to enable curl on Wordpress

How to enable cURL on Wordpress. I have install cURL on my server and I have also enabled in PHP.ini file(removed ; before extension) but still I'm getting error like cURL not available. cURL...

Flume Exception in thread "main" java.lang.OutOfMemoryError: Java heap space

[email protected]:/usr/lib/apache-flume-1.6.0-bin/bin$ ./flume-ng agent --conf ./conf/ -f /usr/lib/apache-flume-1.6.0properties -Dflume.root.logger=DEBUG,console -n agent Info: Including Hadoop...

How to update libcurl version used by R on Ubuntu 18.04

Since I have to use the sftp protocol to retrieve some documents from a remote server I reinstalled the curl library with ssl. The curl --version now correctly returns curl 7.72.0...

Is it possible to maintain a Kerberos token across Kubernetes containers?

We have got a multi container pod with one sidecar container having a script to prepare the TGT cache(/dev/shm/ccache) using keytab and principal. The location /dev/shm/ has been mounted on host...

Is liquibase support kerberos authentication with oracle database connection?

Is liquibase support kerberos authentication with oracle database connection? We are using liquibase node package with version 1.0.1. If kerberos authentication support with liquibase then please...

Delegation token negative renewal time in Spark Structured Streaming

I have a Spark Structured Streaming (3.0.1) job running on Cloudera Cluster. The job is consuming data from a kerberized Kafka and putting it into the ADLS gen2. ADLS access is estabilished with...

RangeError: WebAssembly.instantiate(): Out of memory: wasm memory

I am getting this error while starting my node js app in my cpanel. RangeError: WebAssembly.instantiate(): Out of memory: wasm memory at internal/deps/cjs-module-lexer/dist/lexer.js:1:33573 but...

access is denied from ImpersonateLoggedOnUser

Edit to consider if it can be reopened I'll try to rephrase the question in a simpler way. So in this case, let's forget about the single sign on, the Kerberos authentication and all the web part...