Kerberos Token Renewal

30 Oct 2006 9:46 PM

shankar

I'm using Microsoft.Samples.SSPI dlls to get the kerberos token and send
the ticket server. If kerberos ticket is expired, this dll throws exception.
My questionsis , in dot net, Is there a way to identify whether ticket is
expired and if expired get a fresh kerberos token by providing user
credentials

Thanks

Shankar

30 Oct 2006 9:24 PM

Dominick Baier

which version of .net are you using? Just in case you are using 2.0 - there
is some builtin stuff...

This sample is just a sample - and was never supported. fyi.

---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com

Show quoteHide quote

> I'm using Microsoft.Samples.SSPI dlls to get the kerberos token and
> send the ticket server. If kerberos ticket is expired, this dll throws
> exception. My questionsis , in dot net, Is there a way to identify
> whether ticket is expired and if expired get a fresh kerberos token by
> providing user credentials
>
> Thanks
>
> Shankar
>

31 Oct 2006 7:28 PM

shankar

I'm using .NET 2.0 . The samples works fine for me that there is no way
renew a kerberos ticket. Can please point me to built-in support in .NET
2.0. I would like to renew the kerberos tickets or if expired, I would like
to get new kerberos ticket by providing user credentials

Thanks for your help

Thanks

Shankar

Show quoteHide quote

"Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote in
message news:4580be6319a718c8ca894b4f0220@news.microsoft.com...
> which version of .net are you using? Just in case you are using 2.0 -
there
> is some builtin stuff...
>
> This sample is just a sample - and was never supported. fyi.
>
> ---
> Dominick Baier, DevelopMentor
> http://www.leastprivilege.com
>
> > I'm using Microsoft.Samples.SSPI dlls to get the kerberos token and
> > send the ticket server. If kerberos ticket is expired, this dll throws
> > exception. My questionsis , in dot net, Is there a way to identify
> > whether ticket is expired and if expired get a fresh kerberos token by
> > providing user credentials
> >
> > Thanks
> >
> > Shankar
> >
>
>

3 Nov 2006 6:34 AM

Dominick Baier

the class in .NET 2.0 is called NegotiateStream.

---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com

Show quoteHide quote

> I'm using .NET 2.0 . The samples works fine for me that there is no
> way renew a kerberos ticket. Can please point me to built-in support
> in .NET 2.0. I would like to renew the kerberos tickets or if
> expired, I would like to get new kerberos ticket by providing user
> credentials
>
> Thanks for your help
>
> Thanks
>
> Shankar
>
> "Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote
> in message news:4580be6319a718c8ca894b4f0220@news.microsoft.com...
>
>> which version of .net are you using? Just in case you are using 2.0 -
>>
> there
>
>> is some builtin stuff...
>>
>> This sample is just a sample - and was never supported. fyi.
>>
>> ---
>> Dominick Baier, DevelopMentor
>> http://www.leastprivilege.com
>>> I'm using Microsoft.Samples.SSPI dlls to get the kerberos token and
>>> send the ticket server. If kerberos ticket is expired, this dll
>>> throws exception. My questionsis , in dot net, Is there a way to
>>> identify whether ticket is expired and if expired get a fresh
>>> kerberos token by providing user credentials
>>>
>>> Thanks
>>>
>>> Shankar
>>>

8 Nov 2006 2:43 PM

shankar

NetworkCredential cred = new NetworkCredential("shankar", "password",
"mydomain");

            MemoryStream m = new MemoryStream();

            NegotiateStream kerb = new NegotiateStream(m);

      kerb.AuthenticateAsClient(cred, "serviceprincipal",
         ProtectionLevel.EncryptAndSign,
          System.Security.Principal.TokenImpersonationLevel.Identification);

I get the following error message from AuthenticateAsClient method.

Authentication failed because the remote party has closed the transport
stream

I wasn't able to solve the problem and can you please help me.

Thanks

Shankar

Show quoteHide quote

"Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote in
message news:4580be6319b158c8cd319dd4254a@news.microsoft.com...
> the class in .NET 2.0 is called NegotiateStream.
>
> ---
> Dominick Baier, DevelopMentor
> http://www.leastprivilege.com
>
> > I'm using .NET 2.0 . The samples works fine for me that there is no
> > way renew a kerberos ticket. Can please point me to built-in support
> > in .NET 2.0. I would like to renew the kerberos tickets or if
> > expired, I would like to get new kerberos ticket by providing user
> > credentials
> >
> > Thanks for your help
> >
> > Thanks
> >
> > Shankar
> >
> > "Dominick Baier" <dbaier@pleasepleasenospam_leastprivilege.com> wrote
> > in message news:4580be6319a718c8ca894b4f0220@news.microsoft.com...
> >
> >> which version of .net are you using? Just in case you are using 2.0 -
> >>
> > there
> >
> >> is some builtin stuff...
> >>
> >> This sample is just a sample - and was never supported. fyi.
> >>
> >> ---
> >> Dominick Baier, DevelopMentor
> >> http://www.leastprivilege.com
> >>> I'm using Microsoft.Samples.SSPI dlls to get the kerberos token and
> >>> send the ticket server. If kerberos ticket is expired, this dll
> >>> throws exception. My questionsis , in dot net, Is there a way to
> >>> identify whether ticket is expired and if expired get a fresh
> >>> kerberos token by providing user credentials
> >>>
> >>> Thanks
> >>>
> >>> Shankar
> >>>
>
>