Kerberos
From Authentication Tools for Joomla! (JAuthTools)
(Difference between revisions)
(→Web browsers) |
|||
| (5 intermediate revisions not shown) | |||
| Line 6: | Line 6: | ||
*[[Kerberos/Kerberos and Debian|Kerberos and Debian]] | *[[Kerberos/Kerberos and Debian|Kerberos and Debian]] | ||
*[[Kerberos/Troubleshooting|Kerberos Troubleshooting]] | *[[Kerberos/Troubleshooting|Kerberos Troubleshooting]] | ||
| - | + | *[[Kerberos/Browser Support|Browser Support]] | |
==Other Resources== | ==Other Resources== | ||
| Line 13: | Line 13: | ||
=== Web browsers === | === Web browsers === | ||
* [http://grolmsnet.de/kerbtut/firefox.html Kerberos and Firefox] | * [http://grolmsnet.de/kerbtut/firefox.html Kerberos and Firefox] | ||
| + | * [http://dev.chromium.org/developers/design-documents/http-authentication HTTP Authentication in Chrome] (includes docs on SPN generation for Chrome) | ||
=== IIS === | === IIS === | ||
| Line 19: | Line 20: | ||
* [http://support.microsoft.com/kb/303650 IE not correctly identifying sites in the intranet] (This can cause token errors in Apache) | * [http://support.microsoft.com/kb/303650 IE not correctly identifying sites in the intranet] (This can cause token errors in Apache) | ||
* [http://msdn.microsoft.com/en-us/library/ms998358.aspx Enabling Integrated Windows Authentication in IE] (Required to avoid password prompts) | * [http://msdn.microsoft.com/en-us/library/ms998358.aspx Enabling Integrated Windows Authentication in IE] (Required to avoid password prompts) | ||
| + | * [http://technet.microsoft.com/en-us/library/cc733010(WS.10).aspx Configuration Authentication in IIS7] | ||
=== Kerberos and Apache guides === | === Kerberos and Apache guides === | ||
| Line 24: | Line 26: | ||
*[http://blog.scottlowe.org/2006/08/10/kerberos-based-sso-with-apache/ Kerberos based SSO with Apache] | *[http://blog.scottlowe.org/2006/08/10/kerberos-based-sso-with-apache/ Kerberos based SSO with Apache] | ||
*[http://sl.mvps.org/docs/LinuxApacheKerberosAD.htm Configure Apache on Linux for Kerberos Authentication] | *[http://sl.mvps.org/docs/LinuxApacheKerberosAD.htm Configure Apache on Linux for Kerberos Authentication] | ||
| + | *[http://michele.pupazzo.org/diary/?p=460 Active Directory and Apache Kerberos authentication] (Debian using the Samba approach) | ||
=== Kerberos Troubleshooting === | === Kerberos Troubleshooting === | ||
| Line 30: | Line 33: | ||
*[http://groups.google.com/group/comp.protocols.kerberos/browse_thread/thread/d0229b5e69414a3/298a3436829fb172?lnk=gst&q=windows+2003&rnum=46&utoken=sr-PmzkAAAAcKcOjbwnhHQIzo1cF4IQzLkPNKwi-0NO8rAWVaHL63pBI8ofuZidr1hIm37QuoNLMFfYmITmO1nk4CbSXWulr&pli=1 Google Groups thread on comp.protocols.kerberos about issues with Windows 2003 SP1 and ktpass.exe] | *[http://groups.google.com/group/comp.protocols.kerberos/browse_thread/thread/d0229b5e69414a3/298a3436829fb172?lnk=gst&q=windows+2003&rnum=46&utoken=sr-PmzkAAAAcKcOjbwnhHQIzo1cF4IQzLkPNKwi-0NO8rAWVaHL63pBI8ofuZidr1hIm37QuoNLMFfYmITmO1nk4CbSXWulr&pli=1 Google Groups thread on comp.protocols.kerberos about issues with Windows 2003 SP1 and ktpass.exe] | ||
*[http://www.openafs.org/pipermail/openafs-info/2007-January/025039.html OpenAFS: Windows 2003 Service Keys Info] (has some AFS related notes but a lot of useful information) | *[http://www.openafs.org/pipermail/openafs-info/2007-January/025039.html OpenAFS: Windows 2003 Service Keys Info] (has some AFS related notes but a lot of useful information) | ||
| + | *[http://www.ncsa.edu/UserInfo/Resources/Software/kerberos/troubleshooting.html UNIX Kerberos Troubleshooting Guide] (has some useful information and hints) | ||
=== Scott Lowe on Kerberos === | === Scott Lowe on Kerberos === | ||
Current revision as of 19:31, 8 October 2011
Kerberos is a technology developed by MIT to allow for mutual authentication and ticket based authentication systems and is considered a standard authentication system for most services, computers and users. Kerberos is implemented as the main form of authentication in Microsoft's Active Directory system and eDirectory also provides Kerberos functionality.
Contents |
Kerberos Guides
- Configuring Apache To Authenticate PHP Documents
- Kerberos and SLES9
- Kerberos and Debian
- Kerberos Troubleshooting
- Browser Support
Other Resources
These are alternate resources that may be useful in setting up Kerberos, mostly aimed at Apache
Web browsers
- Kerberos and Firefox
- HTTP Authentication in Chrome (includes docs on SPN generation for Chrome)
IIS
- Integrated Windows Authentication (Wikipedia)
- IIS Web site authentication in Windows Server 2003 (Look for "Integrated Windows Authentication")
- IE not correctly identifying sites in the intranet (This can cause token errors in Apache)
- Enabling Integrated Windows Authentication in IE (Required to avoid password prompts)
- Configuration Authentication in IIS7
Kerberos and Apache guides
- Tutorial: Using mod_auth_kerb with Windows 2000/2003 as KDC (This is one of the original tutorials that I followed in the SLES9 build)
- Kerberos based SSO with Apache
- Configure Apache on Linux for Kerberos Authentication
- Active Directory and Apache Kerberos authentication (Debian using the Samba approach)
Kerberos Troubleshooting
- Common Kerberos related errors in Windows 2000 (Microsoft Knowledge Base Article)
- Preauthentication errors with keys and Windows 2003 SP1 (also related to key version number issues)
- Google Groups thread on comp.protocols.kerberos about issues with Windows 2003 SP1 and ktpass.exe
- OpenAFS: Windows 2003 Service Keys Info (has some AFS related notes but a lot of useful information)
- UNIX Kerberos Troubleshooting Guide (has some useful information and hints)
Scott Lowe on Kerberos
This man has lots of really useful Kerberos related goodies and each page has useful comments that can help you out with a multitude of little issues. Some of it covers more than just Kerberos and moves into what you need to do to get Linux to play nicely, but lots of the information is useful even if only in part.
- Complete Linux AD Authentication Details (Windows 2000 and Windows 2003 pre-R2)
- Linux AD Integration (Windows 2003 R2+)
- More on Kerberos Authentication against Active Directory
- ESX integration with Active Directory
