windows browsers send ntlm instead of kerberos tokens

[Achim Grolms]

On Thursday 03 August 2006 04:28, Daniel B. Bailey wrote:
> hello, i have a situation where SSO (Single Sign On) for Oracle Portal uses
> Kerberos tokens ( Windows Authentacation) to "sign on" to an Oracle system.

What Webbrowsers do you use?
What KDC-Software do you use?
What GSSAPI-implementation is used, SSPI and/or KfW?

> Only for some users, this doesn't work and the regular sign on box appears.
> We have found that this is because the client PC uses the NTLM token to
> authenticate rather than the Kerberos token.  

What happens if that users run

1. kinit theiruserpricipal
2. kvno principalofwebserver ?

> I appreciate any help in advance.

Maybe some hints from my
<http://www.grolmsnet.de/kerbtut/>

are helpful, for example 6.c, 9, 10

Achim