Comments (1)
After turning on krb5 debug, I found that it was trying to use a native config file, /etc/krb5.conf. I had created this file while working with kerby as my KDC. I believe that it was using the realm as specified in that file which conflicted with the token being validated from AD. I removed the file, the checksum issue disappeared and the AD username was shown when navigating to /hello as expected. Closing this issue.
Now, I'm on to trying to access group information from the Kerberos token (using the link you provided). @bedrin - Thanks again for your help on SO and thanks for this great project.
from kerb4j.
Related Issues (20)
- Split package errors
- Can the library use windows ticket cache to fetch the currently logged in user's credentials? HOT 3
- Expose information about encryption method used (etype)
- Warn (and potentially fail) if RC4 or DES are used
- Accept Context shouldn't obtaing TGT by default
- Make API more open
- Support credentials delegation
- Test password expiration / accounts expiration cases and kerb4j cache
- Meaningfull exceptions
- Promote acceptOnly client to initiator automatically on demand
- Make all classes extendable (i.e. non final, without non public constructors) to simplify customizations
- Provide API for Kerberos configuration as opposed to providing path to file
- Implement different engines (JRE, Kerby, Waffle, own)
- Remove dependency on spring-security
- Do we have the plan to upgrade Kerby to 2.0.3 to mitigate CVE-2023-25613? HOT 3
- Support for Jakarta EE + Spring Kerberos 2.x HOT 5
- How can you use keytab based auth for proxy and user based basic auth for actual URL?
- Wrong SIDs returned in PacLogonInfo.resourceGroupSids
- How to provide different credentials to the service being called?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kerb4j.