[27933] in Kerberos

home help back first fref pref prev next nref lref last post

Re: AW: AW: Some Users get Basic Auth?

daemon@ATHENA.MIT.EDU (Todd Stecher)
Wed Jun 13 02:53:51 2007

In-Reply-To: <A4987E8FC1C6CD44805DDE5676EE262E0157816E@w2kmail.konzern.intern>
Mime-Version: 1.0 (Apple Message framework v752.3)
Message-Id: <B760ADDD-8DF8-4373-942E-B547268315FA@qwest.net>
From: Todd Stecher <tstecher@qwest.net>
Date: Tue, 12 Jun 2007 23:51:55 -0700
To: "Djihangiroff, Matthias ((KC-DD))" <Matthias.Djihangiroff@persona.de>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu


On Jun 12, 2007, at 11:25 PM, Djihangiroff, Matthias ((KC-DD)) wrote:

> If i login with MY windows account, all is running perfect. If i  
> login with a user account, they get the auth box. (Both on the same  
> machine, the same domain)
>

Which user account?  A domain account, right?

Also note that IE policy will disallow some forms of integrated auth  
to untrusted / internet zones, which can cause it to fall back to  
basic auth.  This is a per-user setting, and may have relevance  
here.  Also, IE's stoopid - if it sees a . in the URL, it assumes its  
something in the internet zone, and won't allow integrated auth by  
default.

(I'm getting a bit rusty in this area, so let me know what you find -  
too much time on Mac and FreeBSD lately).

Todd 
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post