Collaborate Disseminate
Imagine the following scenario: A company network with "domain joined" linux clients (e.g they have a HOST$@DOMAIN.LOCAL principal in their keytabs file + A computer entry in the DC).
Now an attacker gains access to this network … Continue reading NFS4+Kerberos: Is the client authenticated?
When making a SASL/GSSAPI bind to an LDAP server over port 389 (ldap:///), after the authentication is finished is the resulting LDAP traffic encrypted? If so, is there a document or RFC that describes this?
Assume that no STARTLS comman… Continue reading Is traffic subsequent to a SASL/GSSAPI bind encrypted?
I’m running Arch Linux on a desktop. I am not using Kerberos or Microsoft NTLM. sshd_config has this option set:
GSSAPIAuthentication no
I am not sure why the gssproxy.service is active or why it was started, but it is sta… Continue reading Can I disable GSSAPI Proxy Daemon without consequences? (Linux desktop)
I’m aware that SPNEGO is de-facto only used in the wild for Kerberos or NTLM. Is there any research / academic / educational example on how it can be also used for other mechanisms as well?
I am new to LDAP. I have written the below code that authenticates users with LDAP. I currently have to validate users with a server that has a biding authentication type of GSS-Negotiate. I couldn’t find any examples to vali… Continue reading How to authenticate LDAP user with GSS Negotiate binding authentication using C#?
I am new to LDAP. I have written the below code that authenticates users with LDAP. I currently have to validate users with a server that has a biding authentication type of GSS-Negotiate. I couldn’t find any examples to vali… Continue reading How to authenticate LDAP user with GSS Negotiate binding authentication using C#?
Are there any Secure Authentication for NFS other than Kerberos?
Are there any Secure Authentication for NFS other than Kerberos?
I’ve been doing some research on LDAP supportedSASLMechanisms and am trying to assert whether or not there is confidentiality protection in play when using GSS-SPNEGO.
My initial assessment is that additional configuration i… Continue reading Want to verify confidentiality of GSS-SPNEGO SASL mechanism (LDAP)
I’ve been doing some research on LDAP supportedSASLMechanisms and am trying to assert whether or not there is confidentiality protection in play when using GSS-SPNEGO.
My initial assessment is that additional configuration i… Continue reading Want to verify confidentiality of GSS-SPNEGO SASL mechanism (LDAP)