Kerberos on VM server 64bit, posted by Hal Proctor on Thu May 2 21:10:23 2013
|
I have a logbook installed on a Windows 64 bit VM server 2008 R2 and can access it fine using the password file. However when using Kerberos it does not authenticate correctly. I installed Kerberos and pointed it to the realm an domain controller. Using KINIT command line it appears to accept my password. Any help is appriciated. Perhaps some other diagnostics i could try against the kerberos install
Here is global settings:
port = 49212
ssl = 1
url = https://my-elog.domain.com:49212/
Authentication = Kerberos, file
Kerberos Realm = DOMAIN.COM
Admin User = me
Max content length = 10485760
Password file = pw.txt
Allow password change = 1 (perhaps this is an issue???)
Also...when adding users to the logbook, do you leave the password blank if using Kerberos? |
Re: Kerberos on VM server 64bit, posted by Hal Proctor on Fri May 3 19:09:45 2013
|
| Stefan Ritt wrote: |
|
| Hal Proctor wrote: |
|
I have a logbook installed on a Windows 64 bit VM server 2008 R2 and can access it fine using the password file. However when using Kerberos it does not authenticate correctly. I installed Kerberos and pointed it to the realm an domain controller. Using KINIT command line it appears to accept my password. Any help is appriciated. Perhaps some other diagnostics i could try against the kerberos install
Here is global settings:
port = 49212
ssl = 1
url = https://my-elog.domain.com:49212/
Authentication = Kerberos, file
Kerberos Realm = DOMAIN.COM
Admin User = me
Max content length = 10485760
Password file = pw.txt
Allow password change = 1 (perhaps this is an issue???)
Also...when adding users to the logbook, do you leave the password blank if using Kerberos?
|
You can leave the password just blank.
The "Allow password change = 1" does not make any difference. It works here even with this option.
So I have no idea why you have that problem. Does it work on another computer, i.e. is it related to the 64 bit VM machine?
Best regards,
Stefan
|
The kerberos install, installed the Network Identity Manager and placed krb5 config in my windows directory. Can a server run lsass.exe only? or does the krb5 config file and Network Identity Manager need to be on the server?
|
|
Re: Kerberos on VM server 64bit, posted by Hal Proctor on Fri May 3 19:27:53 2013
|
| Hal Proctor wrote: |
|
| Stefan Ritt wrote: |
|
| Hal Proctor wrote: |
|
I have a logbook installed on a Windows 64 bit VM server 2008 R2 and can access it fine using the password file. However when using Kerberos it does not authenticate correctly. I installed Kerberos and pointed it to the realm an domain controller. Using KINIT command line it appears to accept my password. Any help is appriciated. Perhaps some other diagnostics i could try against the kerberos install
Here is global settings:
port = 49212
ssl = 1
url = https://my-elog.domain.com:49212/
Authentication = Kerberos, file
Kerberos Realm = DOMAIN.COM
Admin User = me
Max content length = 10485760
Password file = pw.txt
Allow password change = 1 (perhaps this is an issue???)
Also...when adding users to the logbook, do you leave the password blank if using Kerberos?
|
You can leave the password just blank.
The "Allow password change = 1" does not make any difference. It works here even with this option.
So I have no idea why you have that problem. Does it work on another computer, i.e. is it related to the 64 bit VM machine?
Best regards,
Stefan
|
The kerberos install, installed the Network Identity Manager and placed krb5 config in my windows directory. Can a server run lsass.exe only? or does the krb5 config file and Network Identity Manager need to be on the server?
|
Installed both on a Windows 2003 R2 server (32bit) and Kerberos not authenticating, yet gievs me a ticket thru kinit. |
|
Kerberos on Windows server, posted by Hal Proctor on Mon May 13 16:44:05 2013
|
Does anyone have a success story with kerberos on windows? |
|
Multi Language based on logged on user?, posted by Hal Proctor on Thu May 16 15:41:34 2013
|
Can ELog support different languages based on the logged on user? |
|
Re: Kerberos on Windows server, posted by Hal Proctor on Thu May 16 16:29:16 2013
|
| Hal Proctor wrote: |
|
Does anyone have a success story with kerberos on windows?
|
Anyone? Bueller? |
|
Admin delete option, posted by Hal Proctor on Wed May 22 22:24:14 2013
|
How can I show the Delete option for Admins?
So I have a logbook with the following config:
[Elog]
Admin User = me, otherguy
Deny Change Config File = otherguy
Restrict edit = 1
Restrict edit time = 4
Menu commands = List, New, Edit, Reply,Last Day, Find, Config, Help |
Find by date/time, posted by Hal Proctor on Tue Sep 3 22:21:29 2013 
|
Is it a time zone issue or a setting issue related to the FIND by date / time issue?
It seems to add an hour to each of the time selections once you select SEARCH. see attached pics |