[30435] in Kerberos
Re: IE6 Fallback to NTLM
daemon@ATHENA.MIT.EDU (Jobo)
Tue Nov 11 17:56:47 2008
Date: Tue, 11 Nov 2008 08:19:46 +0100
From: Jobo <jobo@jobo.com>
MIME-Version: 1.0
In-Reply-To: <m2d4h3ndqe.fsf@darwin.oankali.net>
Message-ID: <49193212$0$761$58c7af7e@news.kabelfoon.nl>
X-Complaints-To: abuse@caiway.nl
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Richard E. Silverman schreef:
>>>>>> "Jobo" == Jobo <jobo@jobo.com> writes:
>
> Jobo> IE (6) and Kerberos At some (actually one) locations in our
> Jobo> network (which is spread all over the Netherlands) we have the
> Jobo> problem that IE6 randomly falls back to NTLM, while FF keeps on
> Jobo> working flawlessly.
>
> Jobo> Does anybody has a clou what is happening? Tickets are valid and
> Jobo> available, and when a new instance of IE is opened, everything
> Jobo> works OK again.
>
> Jobo> The facts: Server: SLES 10 + Apache + mod_auth_kerb (Kerberos 5
> Jobo> release 1.4.3) Client: IE6 on XP Tickets are served by Active
> Jobo> Directory.
>
> Jobo> Thanks in advance, Johan Bosma (j.bosma (at) mindef.nl)
>
> Is the name you're giving the browser for the webserver perhaps a DNS
> alias (CNAME RR)? Bizarre and pointless as it is, Microsoft "doesn't like
> CNAMEs" (direct quote from a Microsoft engineer), and I've seen it behave
> like this.
>
Thanks, a CNAME it is!
I gonna try your solution, it will take a couple or days, but I wil be back.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
