[27930] in Kerberos

home help back first fref pref prev next nref lref last post

AW: Some Users get Basic Auth?

daemon@ATHENA.MIT.EDU (Djihangiroff, Matthias (KC-DD))
Wed Jun 13 02:04:58 2007

Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Wed, 13 Jun 2007 08:04:37 +0200
Message-ID: <A4987E8FC1C6CD44805DDE5676EE262E0157816D@w2kmail.konzern.intern>
In-Reply-To: <20070612131801.395ae632.mba2000@ioplex.com>
From: "Djihangiroff, Matthias (KC-DD)" <Matthias.Djihangiroff@persona.de>
To: "Michael B Allen" <mba2000@ioplex.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit

I've checked the browser settings, Integrated Windows Auth is checked.

Where can i configer the browser, that it use only Kerberos?
I didnt find any option.



-----Ursprüngliche Nachricht-----
Von: Michael B Allen [mailto:mba2000@ioplex.com] 
Gesendet: Dienstag, 12. Juni 2007 19:18
An: Djihangiroff, Matthias (KC-DD)
Cc: kerberos@mit.edu
Betreff: Re: Some Users get Basic Auth?

On Tue, 12 Jun 2007 10:10:15 +0200
"Djihangiroff, Matthias (KC-DD)" <Matthias.Djihangiroff@persona.de> wrote:

> Hi, i have a huge problem.
> 
> Some of our Users get randomly the Basic Auth Box, some get it ALWAYS.
> 
> I sniffed the HTTP Trafic:
> 
> So the interesting line is "Authorization: Negotiate 
> TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw=="
> 
> That doesnt look like a Kerberos Service Ticket? Is that NTLM?

00000:  4e 54 4c 4d 53 53 50 00 01 00 00 00 07 82 08 a2  |NTLMSSP.........|
00010:  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |................|
00020:  05 01 28 0a 00 00 00 0f                          |..(.....        |

This is raw NTLMSSP. Check your browser settings.

Mike

--
Michael B Allen
PHP Active Directory Kerberos SSO
http://www.ioplex.com/
persona service Verwaltungs AG & Co. KG 
Freisenbergstraße 31 • 58513 Lüdenscheid  
Tel.: (02351) 950-0 • Fax: (02351) 950-222 
Sitz Lüdenscheid • Registergericht Iserlohn, HRA Nr. 2930

persönlich haftende Gesellschafterin: persona service AG
Gartenstraße 93 • CH-4002 Basel
Handelsregister Basel, Nr. CH-270.3.012.836-8
diese vertreten durch den Verwaltungsrat:
Dipl.-Ing. Werner Müller (Präsident) und Dr. Sebastian Burckhardt
www.persona.de

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


home help back first fref pref prev next nref lref last post