# kerberos Kerberos is a network authentication protocol that uses secret-key cryptography to provide strong authentication for client/server applications. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Keycloak 23.0.7 released DevFeed: [Keycloak 23.0.7 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2024-02-22T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [LDAP](), [kerberos](), [Localization (l10n)](), [MySQL](), [Quarkus]() Tags: [bugs](), [changes](), [idm](), [kerberos](), [keycloak](), [keycloak-release](), [ldap](), [microsoft](), [mysql](), [openid-connect](), [quarkus](), [release](), [reports](), [saml](), [sso]() ### AI overview Keycloak 23.0.7 is released with an enhancement to shorten offline session cache entry lifespans in memory storage and fixes affecting localization, Kerberos and LDAP integration, MySQL native SQL schema names, Freemarker URL handling, Microsoft social login tests, and CI workflows. ### Source excerpt To download the release go to Keycloak downloads. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Enhancements #26810 Shorter lifespan for offline session cache entries in memory storage Bugs #22431 Localization: Admin UI doesn't pick up message bundles from realms other than master admin/ui #23786 Failure: FipsDistTest ci #25294 Kerberos principal attribute not found on LDAP user - even if kerberos authentication is off ldap #25883 ldap-group-mapper fails when empty member: attribute is present ldap #25912 LDAP federation reports "Creating new LDAP Store..." on every login ldap #25961 Native SQL Schema names broken on MySQL storage #26374 Workflow failure: Quarkus IT - FipsDistTest#testUnsupportedHttpsPkcs12KeyStoreInStrictMode ci #26529 Workflow failure: Quarkus IT - FipsDistTest#testUnsupportedHttpsPkcs12KeyStoreInStrictMode ci #26826 Freemarker erroneously escapes/sanitizes URL in template.ftl (&) login/ui #27120 Microsoft social login failure testsuite ## Keycloak 22.0.2 released DevFeed: [Keycloak 22.0.2 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2023-09-11T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [releases](), [kerberos](), [LDAP]() Tags: [idm](), [kerberos](), [keycloak](), [keycloak-release](), [ldap](), [openid-connect](), [release](), [saml](), [sso]() ### AI overview Keycloak 22.0.2 was released with improvements to LDAP and Kerberos integration, including support for multiple LDAP providers and Kerberos realm scenarios. The release also lists enhancements, upgrades, documentation changes, and bug fixes. ### Source excerpt To download the release go to Keycloak downloads. Release notes Improvements in LDAP and Kerberos integration Keycloak now supports multiple LDAP providers in a realm, which support Kerberos integration with the same Kerberos realm. When an LDAP provider is not able to find the user which was authenticated through Kerberos/SPNEGO, Keycloak ties to fallback to the next LDAP provider. Keycloak has also better support for the case when single LDAP provider supports multiple Kerberos realms, which are in trust with each other. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Enhancements #9422 Support kerberos realm filter on LDAP provider keycloak ldap #10232 Kill sessions after a password reset or MFA modification keycloak authentication #14665 map a kerberos provider to one or more ldap provider stores keycloak ldap #20931 Improvements on Documentation/Guides for "Hostname/Proxy/Admin Console" Settings keycloak #21564 Upgrade to Infinispan 14.0.13.Final keycloak #22452 Ask admins to install the Oracle Database driver separately keycloak #22500 Correct Getting Started guide keycloak #22745 Upgrade to Quarkus 3.2.5.Final keycloak dist/quarkus #22762 Provide support for determining community/product guides keycloak docs #22793 Remove log-level property for `ClassTransformingBuildStep` in Quarkus keycloak dist/quarkus #22795 Error message when JDBC driver is missing is not helpful keycloak #22800 Blank Java adapter section in Securing Apps Guide keycloak #22871 Operator guide screen shot should show fast channel keycloak #23067 Add "LinkedIn (deprecated)" provider to the DEPRECATED profile keycloak identity-brokering Bugs #10981 Keycloak "forgets" ui_locales parameter when using Reset Password functionality keycloak authentication #12137 IdP Mappers ignored when performing external -> internal token exchange keycloak token-exchange #19954 Admin UI hangs with many subgroups keycloak admin/ui #20005 JavaScript Auth ## Attacking Smart Card Based Active Directory Networks DevFeed: [Attacking Smart Card Based Active Directory Networks]() Original publisher: [Read original article]() Author: CCob Published: 2020-10-04T19:31:42Z Content type: tutorial Language: en Sources: [Ethical Chaos]() Topics: [active directory](), [Authentication](), [certificates](), [private key](), [Cryptography](), [kerberos](), [public key]() Tags: [active-directory](), [attacks](), [authentication](), [certificates](), [cobalt-strike](), [hooking](), [kerberos](), [pin](), [pinswipe](), [pki](), [private-key](), [public-key](), [rubeus](), [smart-card](), [swipe](), [weaponize]() ### AI overview This article examines attacks against smart-card-enforced Active Directory networks. It explains that a physical smart card is not necessarily required for smart-card logon when the corresponding private key is available, describes certificate requirements and policy-related certificate abuse, and introduces PKINIT as public-key support for Kerberos pre-authentication. ### Source excerpt Introduction Recently I was involved in an engagement where I was attacking smart card based Active Directory networks. The fact is though, you don't need a physical smart card at all to authenticate to Active Directory that enforces smart card logon. The attributes of the certificate determine if it can be used for smart card [...] The post Attacking Smart Card Based Active Directory Networks appeared first on Ethical Chaos.