spring-security-kerberos | Spring Security Kerberos Extension , your users | Regex library

by spring-projects Java Version: 2.0.0-M1 License: No License

X-Ray Key Features Code Snippets Community Discussions(10)Vulnerabilities Install Support

kandi X-RAY | spring-security-kerberos Summary

spring-security-kerberos is a Java library typically used in Utilities, Regex applications. spring-security-kerberos has no vulnerabilities, it has build file available and it has high support. However spring-security-kerberos has 17 bugs. You can download it from GitHub, Maven.

With the Spring Security Kerberos Extension, your users are authenticated against your web application just by opening the URL. There is no need to enter a username/password and no need to install additional software.

Support

Quality

Security

License

Reuse

Support

spring-security-kerberos has a highly active ecosystem.

It has 157 star(s) with 210 fork(s). There are 33 watchers for this library.

It had no major release in the last 12 months.

There are 50 open issues and 73 have been closed. On average issues are closed in 376 days. There are 17 open pull requests and 0 closed requests.

It has a positive sentiment in the developer community.

The latest version of spring-security-kerberos is 2.0.0-M1

Quality

spring-security-kerberos has 17 bugs (0 blocker, 0 critical, 17 major, 0 minor) and 162 code smells.

Security

spring-security-kerberos has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

spring-security-kerberos code analysis shows 0 unresolved vulnerabilities.

There are 7 security hotspots that need review.

License

spring-security-kerberos does not have a standard license declared.

Check the repository for any license declaration and review the terms closely.

Without a license, all rights are reserved, and you cannot use the library in your applications.

Reuse

spring-security-kerberos releases are available to install and integrate.

Deployable package is available in Maven.

Build file is available. You can build the component from source.

Installation instructions are not available. Examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi has reviewed spring-security-kerberos and discovered the below as its top functions. This is intended to give you an instant insight into spring-security-kerberos implemented functionality, and help decide if they suit your requirements.

Checks if the Authorization header is valid .
Performs KERBER authentication .
Authenticate with given username and password .
Create a DirContext instance using kerberos authentication .
Returns the app configuration entry .
Execute the REST call .
Returns a collection of authorities for a user .
Validate Kerberos authentication .
Sends the request .
Equivalent to KerberosServiceToken

Get all kandi verified functions for this library.

spring-security-kerberos Key Features

No Key Features are available at this moment for spring-security-kerberos.

spring-security-kerberos Examples and Code Snippets

No Code Snippets are available at this moment for spring-security-kerberos.

Community Discussions

Trending Discussions on spring-security-kerberos

Unable to start embedded container with SQL Server

Kerberos Spnego in Spring and Angular frontend + JWT

Kerberos Authentication through Spring Security Failing in IE11 and Chrome but not Firefox

KerberosAuthenticationProvider vs. KerberosServiceAuthenticationProvider

401 SPNEGO SSO with Linux client

Spring boot 2 kerberos Authentication

Adding a repository throws bean creation error

Error during WebSocket handshake: Incorrect 'Sec-WebSocket-Accept' header value

Java Spring SSO authorization using Kerberos and LDAP

Spring security kerberos works with xml config but not with Java config

QUESTION

Unable to start embedded container with SQL Server

Asked 2021-May-31 at 09:24

I have a springboot app that uses a database stored in SQL Express (works perfectly, app.properties below) , and I exported that database to SQL Server 2019, and now I'm facing Error starting Tomcat context. Here is my pom.xml

...

ANSWER

Answered 2021-May-31 at 09:24

I finally solved this by removing the line :

Source https://stackoverflow.com/questions/66115842

QUESTION

Kerberos Spnego in Spring and Angular frontend + JWT

Asked 2020-Jul-03 at 10:07

My main goal is to have a Kerberos authentication first and if it fails have an Angular's form page that send a post with username/password to /users/login.

I have configured pretty much as follow in Spring and already made a login/password authentication that sends back a JWT, with guards in the frontend. The frontend is served in the resources folder of Spring.

Kerberos does not seem to pop up/auto log. Is there something specific to do ?

Is creating a filter after the Kerberos login the right way to process the authentication in the frontend ?

...

ANSWER

Answered 2020-Jul-03 at 10:07

Because my Spnego configuration was using a SpnegoEntryPoint("/#/login") and/or the Spring Security was using .formLogin().loginPage("/#/login").permitAll() and since Spnego uses Forward and not Redirect, he couldn't find the page server side and threw a 404 instead of a 401.

401 is what triggers a Kerberos Authentication coupled with the header WWW-Authorization: Negotiate. So since it threw a 404, it never did initiate the Kerberos Authentication.

Therefore, I changed both /#/login to /index.html (/ would probably work).

Then, Angular side (in app.component.ts), I trigger an API call on a secure endpoint /connect and my CustomAuthenticationSuccessHandler.java registered to my filter simply decorate the header with a JWT Token in the header Authorization : Bearer

Source https://stackoverflow.com/questions/62590332

QUESTION

Kerberos Authentication through Spring Security Failing in IE11 and Chrome but not Firefox

Asked 2019-Dec-13 at 15:07

Intro

I am using Spring Securities Kerberos authentication to handle logging into by website. I followed the instructions here and used the code from here to authenticate the user. In Firefox, everything is successful, the login page below pops up as expected and I can login in using my windows login.

However, the authentication fails in IE and Chrome. Instead of the login screen showing up, a popup asking for the password is shown. When I put in the Windows user and password I get the screen below. No error shows up server side from Spring despite the HTTP Error 500 being displayed on Chrome and IE.

Research

I tried to run the sample code provided here (under spring-security-kerberos-samples/sec-server-win-auth), however the same issue persists. In this case however, Spring returns the following error

...

ANSWER

Answered 2017-Jul-11 at 22:26

It looks like configuration problem (with SPN... not Java code). I suppose that Kerberos doesn't work at all, but Firefox uses NTLM and this is why it works. Chrome usually use configuration from IE. And IE may be more strict then Firefox and doesn't allow authentication with bad ticket:

Source https://stackoverflow.com/questions/45039117

QUESTION

KerberosAuthenticationProvider vs. KerberosServiceAuthenticationProvider

Asked 2019-Aug-19 at 12:58

Moin!

I use Spring Security 5 with Kerberos for the SSO authentication in my project.

In the WebSecurityConfig I register two AuthenticationProvider

...

ANSWER

Answered 2019-Aug-19 at 12:58

As you said: KerberosServiceAuthenticationProvider is used to validate tickets in SSO authentication, whereas KerberosAuthenticationProvider is used for form based authentications, which are usually used as a fallback when SSO is not supported on client side (e.g. browsers on linux systems). This type of authentication is handled by UsernamePasswordAuthenticationFilter which is applied in WebSecurityConfigurerAdapter:

Source https://stackoverflow.com/questions/56152842

QUESTION

401 SPNEGO SSO with Linux client

Asked 2019-Jul-03 at 11:04

I can't manage to configure my Ubuntu VM to single sign-on on my Spring Security web application under Spnego. Did I do anything wrong or am I missing something?

I already got to SSO on a Windows 7 VM, so I believe it's Linux specific.

My configuration is detailed below.

Infra

I have four machines that run in two different hardware:

WIN-SRV2008.company.local: the VM KDC running Windows Server 2008 (hardware A)
TOMCAT.company.local: running the Tomcat 7 web application (hardware A)
W7-CLIENT.company.local: VM Windows 7 client which SSO works (hardware B)
U-CLIENT.company.local: VM Ubuntu 17.10.1 client which SSO doesn't work (hardware B)

SPN

My SPN, krb5.ini and login.conf were based on this thread's description.

Spnego

I basically followed Spring Security Kerberos - Reference Documentation, except removing form login, resulting on:

...

ANSWER

Answered 2019-Jul-03 at 11:04

Thanks to Samson's comment I was able to make it work.

I was indeed switching to an empty cache by doing sudo su my_ubuntu_user@COMPANY.local, what made my application login respond 401.

Source https://stackoverflow.com/questions/53073701

QUESTION

Spring boot 2 kerberos Authentication

Asked 2019-Jun-26 at 05:01

I wanted to know how to use Spring Security Kerberos with Spring Boot 2.0.

We are currently trying to get the SPNego filter to work.

This is the error:

...

ANSWER

Answered 2018-Aug-09 at 05:37

Kerberos service principal didn't setup properly. Now its working fine.

Basic configuration steps :

1) Krb5 conf should be loaded properly (it contains KDC and realm related information).

2) Service principal (HTTP/xyz) must be created and keytab should be provided as a configuration.

3) If you are calling any rest service via client program then you need to provide user principal and keytab, or you can use local Kerberos cache (krb5_123x).

Source https://stackoverflow.com/questions/51704843

QUESTION

Adding a repository throws bean creation error

Asked 2019-Mar-07 at 21:25

My app was working fine until I tried adding a second repository. The stack trace mentions a requestMappingHandlerAdapter, that I can't find in my code. Any idea what this is trying to tell me? This is my first Java Project starting from the ground up so I am not sure if it is my security or configuration, or just something wrong with my new repository. Thanks for any help!

Here's the stack trace with the error(s):

...

ANSWER

Answered 2019-Mar-07 at 21:25

Actual error is Not a managed type: class com.project1.models.Broker

This mean that Broker is not managed by spring. So you should add @Entity annotation to Broker.

And if it will not help - add @EntityScan( basePackages = {"com.project1.models"} ) to your start application class

Source https://stackoverflow.com/questions/55051214

QUESTION

Error during WebSocket handshake: Incorrect 'Sec-WebSocket-Accept' header value

Asked 2018-Dec-06 at 09:36

I have a spring-boot websocket connection which sits behind spring-security-kerberos to achieve SSO. This works as expected but if I restart the server I see clients fail to re-connect with the error Error during WebSocket handshake: Incorrect 'Sec-WebSocket-Accept' header value.

I am using @stomp/stompjs 4.0.8 and setting stompClient.reconnect_delay = 5000

Is there any way to solve this? I am concerned that running this behind a load balancer would cause this error to occur all the time.

This is based on the messaging-stomp-websocket example + spring-security websocket-authentication

...

ANSWER

Answered 2018-Dec-06 at 09:36

It appears that spring-security-web RequestCacheAwareFilter extracts a cached request which results in the actual Sec-WebSocket-Key header value being replaced with an invalid one.

The sequence of events is that each time the client attempts a re-connect the client makes two websocket requests, the first is rejected with a WWW-Authenticate: Negotiate header and the second which contains a Authorization header has a different Sec-WebSocket-Key value.

I was able to resolve this by disabling caching completely, e.g. within a WebSecurityConfigurerAdapter

Source https://stackoverflow.com/questions/52444378

QUESTION

Java Spring SSO authorization using Kerberos and LDAP

Asked 2018-Apr-19 at 22:25

I am working on Linux based Rest API application using Java Spring Kerberos Security libraries (link).

I have managed to implement SSO authentication which works as expected, but now need to add LDAP integration in order to implement ROLE based authorization.

However, LDAP binding/search doesn't work - SearchFilter failing with following exception:

...

ANSWER

Answered 2018-Apr-19 at 22:25

Solution is very simple - remove quotes under application.properties config for following rows:

Before

Source https://stackoverflow.com/questions/49909632

QUESTION

Spring security kerberos works with xml config but not with Java config

Asked 2017-Aug-25 at 13:15

I tried the examples of spring security kerberos in with xml config then with java config. It's exactly the same config (one in xml, one in java).

When I use the project with xml config, it works. However, when I use the project with java config, I have this stacktrace :

...

ANSWER

Answered 2017-Aug-25 at 13:15

With xml config, in application.yml, the keytab location must be an absolute path precede by "file://"

Source https://stackoverflow.com/questions/45881058

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install spring-security-kerberos

You can download it from GitHub, Maven.
You can use spring-security-kerberos like any standard Java library. Please include the the jar files in your classpath. You can also use any IDE and you can run and debug the spring-security-kerberos component as you would do with any other Java program. Best practice is to use a build tool that supports dependency management such as Maven or Gradle. For Maven installation, please refer maven.apache.org. For Gradle installation, please refer gradle.org .

Support

Be sure to read the Spring Security Kerberos Reference. Extensive JavaDoc for the Spring Security Kerberos code is also available in the Spring Security Kerberos API Documentation.

Find more information at: