[30291] in Kerberos
Re: spnego
daemon@ATHENA.MIT.EDU (Michael B Allen)
Thu Sep 11 14:02:29 2008
Message-ID: <78c6bd860809111101ke8906dbm70ed1710beed7d02@mail.gmail.com>
Date: Thu, 11 Sep 2008 14:01:33 -0400
From: "Michael B Allen" <ioplex@gmail.com>
To: Tuomas <tuomaksen.spammiposti@gmail.com>
In-Reply-To: <48C9479A.3080604@gmail.com>
MIME-Version: 1.0
Content-Disposition: inline
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Thu, Sep 11, 2008 at 12:30 PM, Tuomas
<tuomaksen.spammiposti@gmail.com> wrote:
> I also found out using wireshark what Internet Explorer does when it
> fails to authenticate using Kerberos. It asks a ticket from the Active
> Directory server for HTTP/virtualhost.domain.com instead of
> HTTP/realname.domain.com. For me this seems like a bug in IE7, has
> anyone found solutions for this?
That's not a bug. You will need to add SPNs to the desired account
(using setspn) for each virtual hostname.
Mike
--
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
