[19315] in Kerberos_V5_Development
Re: SPNEGO question
daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Nov 9 17:02:21 2015
To: Pascal Jakobi <pascal.jakobi@gmail.com>, krbdev@mit.edu
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <564117E2.60402@mit.edu>
Date: Mon, 9 Nov 2015 17:02:10 -0500
MIME-Version: 1.0
In-Reply-To: <56410F46.4060300@gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 11/09/2015 04:25 PM, Pascal Jakobi wrote:
> I am still testing kerberos pretty thoroughly. Now I am at SPNEGO.
These questions would be better suited for kerberos@mit.edu; the krbdev
list is for development of MIT krb5.
> I was able to have it to work (with firefox) when calling simple URI
> such as http://host.domain.tld but not when calling
> http://host.domain.tld/test_dir.
> I did change the negotiate URI field in firefox configuration, but did
> not touch the service keytab (HTTP/<host>). My guess is that the problem
> is there...
>
> Does this mean that in reality SPNEGO is limited to vrtual hosts ?
No, SPNEGO is not limited to virtual hosts. Your problem is almost
certainly outside the scope of the GSS-API implementation (i.e. either
within Firefox or within the web server); unfortunately I don't know
what it might be.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
