[30434] in Kerberos

home help back first fref pref prev next nref lref last post

Re: IE6 Fallback to NTLM

daemon@ATHENA.MIT.EDU (Richard E. Silverman)
Tue Nov 11 17:56:20 2008

From: "Richard E. Silverman" <res@qoxp.net>
Date: Mon, 10 Nov 2008 22:27:53 -0500
Message-ID: <m2d4h3ndqe.fsf@darwin.oankali.net>
MIME-Version: 1.0
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

>>>>> "Jobo" == Jobo  <jobo@jobo.com> writes:

    Jobo> IE (6) and Kerberos At some (actually one) locations in our
    Jobo> network (which is spread all over the Netherlands) we have the
    Jobo> problem that IE6 randomly falls back to NTLM, while FF keeps on
    Jobo> working flawlessly.

    Jobo> Does anybody has a clou what is happening? Tickets are valid and
    Jobo> available, and when a new instance of IE is opened, everything
    Jobo> works OK again.

    Jobo> The facts: Server: SLES 10 + Apache + mod_auth_kerb (Kerberos 5
    Jobo> release 1.4.3) Client: IE6 on XP Tickets are served by Active
    Jobo> Directory.

    Jobo> Thanks in advance, Johan Bosma (j.bosma (at) mindef.nl)

Is the name you're giving the browser for the webserver perhaps a DNS
alias (CNAME RR)?  Bizarre and pointless as it is, Microsoft "doesn't like
CNAMEs" (direct quote from a Microsoft engineer), and I've seen it behave
like this.

-- 
  Richard Silverman
  res@qoxp.net

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post