[27104] in Kerberos
Re: Using kerberos ticket on web browsers
daemon@ATHENA.MIT.EDU (Michael B Allen)
Wed Dec 6 14:46:56 2006
Date: Wed, 6 Dec 2006 14:46:09 -0500
From: Michael B Allen <mba2000@ioplex.com>
To: "Diego Lima" <diego-lima@prodesan.com.br>
Message-Id: <20061206144609.7b971833.mba2000@ioplex.com>
In-Reply-To: <20061206162856.M43940@prodesan.com.br>
Mime-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Wed, 6 Dec 2006 13:33:20 -0300
"Diego Lima" <diego-lima@prodesan.com.br> wrote:
> On Wed, 6 Dec 2006 16:22:27 -0000, Tim Alsop wrote
> > What URL are you using when you request access to the web site ?
>
> I can reach the website through its IP address or its DNS name (estagiario6).
> So I can access both using http://192.168.130.222 or http://estagiario6. I
You cannot use an IP address. The hostname in the URL must exactly match
the hostname of the SPN for the service account.
For example if the SPN is HTTP/estagiario6.sso.com.br@SSO.COM.BR then you
MUST use a URL of http://estagiario6.sso.com.br/ to access the site. Any
deviation from that will not work.
Mike
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
