[24394] in Kerberos
Re: Kerberos and IE Single Sign-on
daemon@ATHENA.MIT.EDU (Nikola Milutinovic)
Wed Aug 3 05:36:06 2005
Message-Id: <42EF9811.3010702@ev.co.yu>
Date: Tue, 02 Aug 2005 17:58:09 +0200
From: Nikola Milutinovic <Nikola.Milutinovic@ev.co.yu>
Mime-Version: 1.0
To: Luciano Bolonheis <bolonheis@gmail.com>
In-Reply-To: <846437605080207205e29c1ab@mail.gmail.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Luciano Bolonheis wrote:
>Hi,
>i'm trying to make a Single sign-on environment... and I have all the
>possible problems...
>using the mod_auth_kerb with apache in internet explorer, it
>authenticate but asks for the password. I get a ticket with the Kfw
>Leash32 application, and even with valid ticket is asks for the
>password. Someone know what can I do?
>
>
You should find out if IE is actually using the Kerberos ticket. I
recall some obscure option in IE config for that. For instance, in
Outlook Express, that option is SPA (Secure Password Authentication). If
you machine is in ADS, it will try GSS-API, otherwise, it will go for NTLM.
I think IE has a similarly cryptic option name.
Nix.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
