Authenticated scan - is Kerberos even possible with latest Docker images?

[pandel]

Hi!

As no one officially seems to be able/willing to help in detail, I am just curious if it should be possible “at all” to scan a Windows host that has to be authenticated via Kerberos. Regardless of what I try, it does not work so I wonder if the current Docker images simply don’t have the capability to scan this way.

If someone from the official team could only say “yes” or “no” would very much simplify the search for a solution.

Thanks and regards,

Holger

[rippledj (Joseph)]

You can see the conversation here, since it currently applies to all Community Edition products AFAIK.

[cfi]

@pandel

As no one officially seems to be able/willing to help in detail

Could you please elaborate on this? I haven’t seen any recent question here or on GitHub so not sure to what this is referring to.

[pandel]

@rippledj Many thanks! I did find the question yesterday, but as you answered only 2h ago, I did not read it yet. I will follow the thread.

@cfi Without listing the threads I found about Kerberos, there was not a single one where any official crew member stated something about if the CE edition is capable of doing it in general or something more detailed (how to define usernames EXACTLY in the dialog, how to define Kerberos configuration ie. in case of disjoint namespaces, etc.) so I thought, that this should “force” people to use a payed license and official support. And as I did not want to blame anybody for this, I thought it might be helpful to just ask for a general “yes” or no"no”.

[cfi]

@pandel No worries, it was just strange to read a “no one officially seems to be able/willing to help in detail” while none of such question has been asked here in the forums:

If you search e.g. via Search results for 'kerberos order:latest' - Greenbone Community Forum only three very recent threads about Kerberos from today / yesterday are available.

[pandel]

@cfi Yes, you’re right! I am sorry for the somewhat rude sounding wording I was a bit frustrated after searching the whole day for a solution. If I had known that the GSA is configurable at all in this way I would not have asked!

[cfi]

Ahhh, forgot to mention:

There are a few aged threads from 4-5 years ago about Kerberos but please keep in mind that this is a community based support forums with only few Greenbone staff answering some questions on a volunteer basis from time to time / as time permits.