Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [kerberos]

An ticket (claims) based AuthN protocol

0
votes
1answer
733 views

Can authenticate through Negotiate with PowerShell but not with Java

I need some help setting up Kerberos on SharePoint correctly for a test single farm server. I am able to successfully use PowerShell to authenticate to this server as a given kerberos user: Invoke-...
0
votes
1answer
48 views

Does ADFS (SSO) require Kerberos

Could someone confirm if I was to utilise ADFS + Azure connect to provide a SSO experience for Office365 then will Kerberos need to be enabled anywhere in the system (I understand Kerberos is the ...
1
vote
2answers
198 views

Migrate Basic Authentication Web Application to Kerberos (2013 -> 2016)

We are planning migration from SharePoint 2013 to SharePoint 2016. Have checked all web applications with Get-SPAuthenticationProvider -Zone "Default" -WebApplication https://teamstest.domain All ...
0
votes
1answer
60 views

SSIS SharePoint List Source - MessageSecurityException HTTP request not authorized 401 on single site

Got a connecting issue just on a singe site collection running in SharePoint 2013... Using the SSIS "SharePoint List Source" or "SharePoint List Destination" there is an issue with a single ...
1
vote
0answers
108 views

SharePoint hosted app asking for credentials when connected via VPN from mac

I have a https SharePoint 2016 on premise site collection. Below are the functionalities implemented in the site collection. 1. SharePoint hosted apps are deployed. for example- SharePoint domain is ...
2
votes
1answer
3k views

How to change the NTLM to Kerberos authentication in SharePoint 2013

We have Configured the SharePoint 2013 with NTLM authentication. After few months our security team requests us to change the current authentication method from NTML to Kerberos in SP2013 hosted web ...
1
vote
0answers
632 views

SharePoint 2016. How to ensure Kerberos authentication is working properly

How to ensure Kerberos authentication for SharePoint 2016 is working properly? HTTP headers show that Kerberos is used, but klist did not show ticket for SharePoint site. What does it mean? Details ...
1
vote
0answers
240 views

Sharepoint 2016 shows wrong username. How i can investigate further?

We have a SharePoint 2016 Farm with Kerberos Authentication behind an Apache Reverse Proxy. This worked fine the last months. Now, when my colleague or I open SharePoint in the Internet Explorer the ...
1
vote
0answers
47 views

Kerberos configuration on Sharepoint 2013

I Have Sharepoint 2013 Server with Database on the same machine. I have configured Kerbereos following the Youtube Kerberos configuration I have enabled Kerberos in my web application and ...
3
votes
0answers
701 views

401 unauthorized response calling REST api after enabling Kerberos in Sharepoint 2013

I have Sharepoint 2013 on-prem Farm installed in a developer 2008 server. The database, the app and the frontend are all installed in the same server. Everything works fine until I decide to enable ...
0
votes
3answers
577 views

Switching authentication provider

Trying to switch from an ADFS Trusted Identity Provider to Kerberos. In the user profile service, users appear to be different identities. Do I need to migrate every account using Move-SPUser? It ...
0
votes
1answer
306 views

Do i need to set up SPN for SQL Server

We have already set up our SharePoint farm. We would like to configure kerberos and hence create SPN's. At this point should we go ahead and create SPN's for SQl server also or can it be skipped?
0
votes
0answers
1k views

Kerberos and SharePoint 2016

Has anyone got SharePoint 2016 and Kerberos to work? I'm more Dev than IT Pro, so I'm struggling. I'm trying to set up a farm consisting of a DC and a SharePoint2016 /SQL 2016 server on Hyper V. I've ...
1
vote
1answer
447 views

What is the DNS requirement to support Negotiate (Kerberos) authentication type?

We are using SP2013 on-premise. We need to switch a web application Windows Authentication from NTLM to Negotiate (Kerberos): May I know what is the DNS requirement to support Kerberos? In my test ...
0
votes
1answer
729 views

Issue with login Prompt of SharePoint Sites

There is a sudden issue in our SharePoint Servers and we are faced with continuous login prompt coming up while trying to open SharePoint Sites. It is happening in all server and SharePoint team is ...
0
votes
1answer
278 views

Configuring Kerberos with Host-Named Site Collections

So I created a Single Web Application: rootsite.contoso.com with a Root Site Collection. I set the Authentication in the Web App to use Kerberos and then Set the SPN for the AppPool account running ...
3
votes
1answer
92 views

Logged as another user

UPDATE : I've totally disabled the Distributed Cache, however, the problem is still there. For the record, I've applied CU7 for AppFabric as well as SharePoint 2013 Server March '13 CU. No luck so ...
1
vote
2answers
570 views

Kerberos for Central Administration

So I am at the moment trying to setup kerberos authentication for the central administration of sharepoint. I did already get it to work for normal site collections where it works without any problem. ...
0
votes
1answer
594 views

SharePoint 2013 Kerberos IE: 'Page Cannot be displayed' externally

I have a client with set up with Kerberos authentication. Inside their network it works beautifully. It's a 4 server farm: 2 WFEs behind a load balancer (kemp), 1 App/CA server, 1 Office Web services ...
1
vote
1answer
96 views

Configuring SPNs for SharePoint 2010

I am working with a SharePoint 2010 set up operating in Classic mode and consisting of four servers: Web server Application server SQL server SQL reporting server The SharePoint application pools on ...
2
votes
0answers
31 views

SharePoint 2010 Kerberos Configuration Troubleshooter

Can someone say if it's possible to download fresh version of "SharePoint 2010 Kerberos Configuration Troubleshooter" utility? The problem I've got a program SDP.0b21cdb73234323739363835353551.Run....
4
votes
2answers
849 views

Kerberos for multihop remoting powershell

I am trying to set up a remote powershell session to a sharepoint server in order to do remote management. I am running as a user with full mgmt rights at the sharepoint server If I use Credssp and ...
2
votes
1answer
695 views

SharePoint 2013 + Reporting Services + Kerberos

How to configure SharePoint 2013 with Reporting Services for delegations if I get data for Reporting Service from other SQL server that ShqrePoint database? I found below blog but I'm not sure about ...
1
vote
1answer
105 views

Kerberos - Farm Account

I have to configure Kerberos for PerformancePoint and I have one farm account for all services in test farm. I need add delagtion for Performance Account. Can I use Farm account to set spn as below ...
2
votes
1answer
5k views

How to create WebApplication with claims based authentication using Kerberos in PowerShell in SP2013

I want to create WebApplication in PowerShell (SharePoint 2013) with the recommended claims based authentication and using Kerberos (instead of default NTLM). Based on the documentation I used command ...
1
vote
1answer
56 views

How to require Kerberos authentication on SharePoint?

I have created an Active Directory Domain Controller-integrated SharePoint site on Azure using the new Create SharePoint Farm feature. I want to change it to require Kerberos. Does anyone know how ...
10
votes
1answer
4k views

Passing a Kerberos Ticket to a web service

I'm trying to pass a Kerberos ticket onto a webservice through a custom webpart. The webservice is a WCF service, but it is a 3rd party web service that is not claims-aware. The web service doesn't ...
0
votes
1answer
471 views

Duplicate SPNs in Sharepoint

I inherited a sharepoint server. In the logs I found many Error level log entries called Security-Kerberos with Event ID 3 referencing Error Code: 0x7 DC_ERR_S_PRINCIPAL_UNKNOWN. After some research ...
1
vote
0answers
495 views

Sharepoint Kerberos and… search?

I'm troubleshooting some kerberos issues with Sharepoint and turned on kerberos logging. I'm getting - +++ A Kerberos Error Message was received: on logon session Client Time: Server Time: 2:...
0
votes
1answer
1k views

SharePoint 2013 InfoPath External Connections with Kerberos

Environment 2 App 2 WFE 1 DB C2WTS account- domain\AppPool (Log on as service/act as OS/Impersonate auth policy on all 4 servers) IIS Kernel mode - off Delegation for the all four servers: Using ...
4
votes
1answer
989 views

SharePoint 2013 Kerberos Setup Issue - NT AUTHORITY\ANONYMOUS LOGON

Facing issues while configuring the Kerberos . The process is as below ASP.Net full trust farm solution deployed on SharePoint 2013 App Server (IIS 8) connects to SQL Server 2008 R2 Database 1. ...
1
vote
2answers
272 views

What's the best authentication method if client won't give us access to their internal AD?

I have a provincial government client who we're deploying a SharePoint 2013 Standard farm. Because we're a 3rd party consultant they are reluctant to expose their AD and allow us to ADFS single-sign ...
0
votes
1answer
1k views

SharePoint Self Hosted apps - Kerberos Authentication

From this article its clear that SharePoint self hosted apps doesn't support Kerberos authentication unless "it is configured to use NTLM as a fallback authentication method" Could any one be able to ...
1
vote
1answer
181 views

Kerberos + SharePoint

Kerberos - the beast of SharePoint - has been configured and is creating tickets on my test environment WFE. I also had RevertToSelf for the BCS service application turned on. I am able to create an ...
3
votes
1answer
878 views

SharePoint 2013 authentification with Kerberos and Forms

We are currently using SP2010 with ADFS to implement the following scenario: [Internet]->ADFS with Webform->[SP2010]<-ADFS with Windows Auth<-[Internal Network] SharePoint has only one Url (...
24
votes
1answer
1k views

SharePoint Hybrid Search Setup - Issues with Kerberos 3-Tier Farm

I'm having issues setting up the first leg of a Hybrid environment between my SP2013 Production On-Premise Farm with my SharePoint Online. It's a 3-Tier system with Kerberos authentication enabled, ...
0
votes
1answer
572 views

Connecting with SSRS using XML Data Source leads to 401 Unauthorized

I am currently working on Report Builder 2.0 with Reporting Services 2008 and am trying to connect to a SharePoint 2013 site using an XML data source query. SharePoint and Report Builder/Services are ...
0
votes
2answers
46 views

Keberos cannot access internal URLs

I've activated Kerberos on my environment and it seems to be working fine for accessing the website using it's dns name: http://myintranet.mycompany.com I cannot however access sites anymore using ...
1
vote
1answer
146 views

SSRS Intermittant Exceptions

Someone assisted me this morning with one issue related to Reporting Services in SharePoint Integrated mode: SharePoint Reporting Services - NLB issue Now I seem to have another issue. The post ...
0
votes
1answer
354 views

PerformancePoint/Dashboard Designer 2010 & Unattended account

I don't use Kerberos Auth in my SP farm. I have a user that is trying to create a SQL Connection in Dashboard Designer. He tried the Per-User identity option, but received an error about PerfPoint not ...
3
votes
2answers
4k views

need to know SharePoint 2010 web app using NTLM or Kerberos

How can I know whether my SharePoint 2010 Web Application is using NTLM or Kerberos authentication?
2
votes
2answers
599 views

NTLM or Kerberos for Intranet & Internet application in SharePoint 2010

NTLM or Kerberos.... which authentication is suitable for Intranet application? Internet application? Will answer differ if 3rd party tools are used? for MySite and ContentType Hub application ...
1
vote
1answer
76 views

Which service account to use for Kerberos in out-of-the-box SharePoint?

I just installed SharePoint2013 Enterprise on Windows 7. Now trying to set up Kerberos authentication, following this guide. PROBLEM: What is "serviceaccount"? In this context: 2.2 Next, list all ...
7
votes
4answers
9k views

How to setup Kerberos Constrained Delegation for SharePoint Excel Services and Analysis Services

This question is in continuation to MSOLAPSvc.3 service missing from kerberos delegation Target : To refresh a pivot table based out of a SSAS cube using Windows Authentication in the excel service ...
1
vote
1answer
4k views

SP2013 won't use Kerberos - but C2WTSTest passes fine?

I'm setting up a new SharePoint 2013 farm using Kerberos authentication. I've read a ton of resources about it and it seems I've got my solution 99% right - Kerberos is working like a charm when I ...
4
votes
1answer
12k views

Planning for SPNs - what SPNs would I need?

I'm planning to set-up Kerberos in SharePoint 2013, but I'm unsure about the amount of SPNs I need. The farm I want to install is 3-tier: Server02: AD and KDC Server06: MSSQL Database Server Server37:...
1
vote
1answer
1k views

Powerpivot data refresh over kerberos delegation

I have a SQL 2008 R2 OLAP Cube and an Excel file that uses powerpivot and embedded datasource to the Cube. I want to upload the Excel file in SharePoint and allow users who are authenticated to the ...
6
votes
3answers
3k views

SharePoint 2010 Query service authentication problem

I am struggling with calling search.asmx service from asp.net page. I've created proxy class using svcutil.exe and run request using following code: var binding = new BasicHttpBinding(); binding....
1
vote
2answers
4k views

Kerberos on Chrome, Safari or FireFox

recently enabled Kerberos on my SharePoint 2010 install. If I browse from IE, I see logins authenticate over Kerberos protocol. If I browse from any other browser (Chrome, Firefox, Safari..), NTLM ...
12
votes
2answers
3k views

Identify Current Authentication Method Being Used

I am working on a solution that needs to act slightly differently if the incoming request is NTLM vs. Kerberos vs. ADFS, etc. Does anyone have an example of how to determine the incoming ...