Questions tagged [sspi]

Use for questions having to do with the Security Support Provider Interface (SSPI) API.

The Security Support Provider Interface () is a Microsoft Windows API used to perform security-related operations such as authentication. It is implemented as a a dynamic-link library (DLL) supplied with the operating system. SSPI is the means by which the operating system loads SSPs (Security Support Providers), such as Kerberos and NTLM, when the system boots. The SSPI is the implementation of the Generic Security Service API () in Windows.

This article, while dated, is a good primer on : Logon and Authentication Technologies

216 questions
0
votes
2 answers

SSPI Errors for SQL Server Authentication?

We have several old ASP and PHP web applications which use SQL Server Authentication. Periodically, all the applications lose the ability to connect to our SQL Server 2000 database server, getting access denied. Corresponding to roughly the same…
Nathan
  • 10,097
  • 9
  • 59
  • 81
0
votes
1 answer

Integrated Security SSPI - The Select Permission was denied on the object

I am getting this error for 2 of 3 users when they attempt to run a Macro enables Excel workbook that queries MSSQL 2014 from Excel 2013 & 2016. I thought since the code had "integrated security = SSPI" set, that every user would have the same…
KirstieBallance
  • 902
  • 8
  • 23
0
votes
1 answer

Kerberos Impersonation using SSPI: no errors, but not working

I need to impersonate a user in a Java application server, and execute an http request to an ASP application in IIS with the permissions of that user. I am trying to adapt the WindowsNegotiateScheme class of the Apache HttpClient for this purpose.…
FrankPl
  • 563
  • 2
  • 18
0
votes
2 answers

Deploying SSIS -- Cannot Generate SSPI Context

I am attempting to deploy an SSIS package to a server. I can build connection managers to the target server and databases on that server. However, attempting to deploy the error appears:
Sauron
  • 5,537
  • 13
  • 59
  • 106
0
votes
3 answers

The target principal name is incorrect. Cannot generate SSPI context. Azure SQL Database

I am getting the error the target principal name is incorrect. Cannot generate SSPI context when trying to access a database that is in an Azure SQL Database when using Power BI Desktop Has anyone else encountered this? Management studio can…
Paul
  • 2,199
  • 4
  • 27
  • 53
0
votes
1 answer

Understanding the NegotiateFlags parameter of NTLM messages

I'm struggling to understand how to properly read and construct my NegotiateFlags parameter on the NTLM messages. On the official protocol specification I simply cannot understand that table. I think it represents a 32-bits since the NegotiateFlags…
user2864778
  • 333
  • 3
  • 14
0
votes
0 answers

SSPI negotiation failed with WtrustChannelFactory

This one has me for a while now, I am trying to build a console app that can call a .net web/wcf service SP, the first leg is to get a token from the idP (ADFS4.0) the pasted code was working fine for a whole day, at some point it stopped working…
amritanshu
  • 658
  • 10
  • 22
0
votes
0 answers

tortoise svn checkout access forbidden and not prompting for login

I have been using tortoise svn for a long time on this pc but it has suddenly stopped working. I was performing svn checkout via tortoise and it returns the error: Unable to connect to a repository at URL: Access to
paolov
  • 1,643
  • 1
  • 24
  • 30
0
votes
0 answers

Alternatives to LsaLogonUser with KERB_S4U_LOGON have Network access?

Are there any alternatives to LsaLogonUser for impersonating given account in order to access network resources? I'm looking for the method of impersonation which would let me call a remote machine via UNC in the same domain. For initial data I…
Flinkas
  • 56
  • 9
0
votes
2 answers

Running a t-sql stored procedure with EXECUTE AS statement with .NET SqlCommand

I have a .NET web service application that executes parameterized MS SQL Server stored procedures using System.Data.SqlCommand. The application receives a name of the stored procedure and its parameters from user input. Also the application…
prot
  • 220
  • 4
  • 21
0
votes
1 answer

git cvsimport from remote machine accessible via SSPI only?

I have a CVS repository on a remote Windows machine, checked out to my local Windows machine. I want to use git cvsimport to have git log, but the remote repo is only accessible via SSPI, which, if I understand this answer correctly doesn't work…
afarah
  • 761
  • 3
  • 16
0
votes
0 answers

Is there any way to disable the replay cache when authenticate with SSPI?

I uses SSPI Kerberos do user authentication on Windows. While the AcceptSecurityContext() always fail when it receives a same token from client. It seems caused by replay cache. Is there any way to disable it on Windows with C?
0
votes
1 answer

DecryptMessage (Schannel). Dealing with empty output buffers

I'm trying to use Schannel SSPI to send/receive data over SSL connection, using sockets. I have some questions on DecryptMessage() 1) MSDN says that sometimes the application will receive data from the remote party, then successfully decrypt it…
CITBL
  • 1,326
  • 3
  • 17
  • 31
0
votes
1 answer

Can not Generate SSPI context in SQL Server, Windows 10

I'm creating a C# application which accesses a SQL Server database on another PC in the local network. I have Windows 7 running on my PC and have SQL Server installed, and Windows 10 running on the remote PC from where I am accessing the database. I…
Delicate Hiba
  • 43
  • 1
  • 5
  • 13
0
votes
1 answer

Invalid Memory Access on QueryContextAttributes using JNA

I am attempting to use JNA to invoke the QueryContextAttributes function in the Secur32.dll on Windows. I am unable to get the invocation correct for the SECPKG_ATTR_SIZES call. I have an implementation working for SECPKG_ATTR_NAMES and…
KevinO
  • 4,111
  • 4
  • 23
  • 34