Apache + Kerberos + MS-AD = SSO / Problem with a Login Box for some Users

[palm]

Sorry thats all dont work !!! We try out Allready any hotfixes from MS
for the Desktop Client.

We have still the same Problem ... some users get sometimes a loginbox
because in the Logfiles the system try  to make a authorization with
NTLM......  But only sometimes !?!?!?

:-(



On Nov 26, 8:45 pm, "Markus Moeller" <hua... at moeller.plus.com> wrote:
> The following was posted a couple of month ago and might address your issue.
> Could you post back if it helped  ?
>
> "Michael B Allen" <mba2... at ioplex.com> wrote in messagenews:20070502022654.389f3da3.mba2000 at ioplex.com...
>
>
>
> > Good job Sriram. I'm cc-ing the mod_auth_kerb list. They were talking
> > about
> > this issue a while back.
>
> > Mike
>
> > On Tue, 1 May 2007 19:08:05 -0700 (PDT)
> > SriramG <sgopa... at etrade.com> wrote:
>
> >> Just wanted to update back, if anyone ends up with this issue.
>
> >> We contacted MS they provided a hotfix as mentioned on the KB
>
> >>http://support.microsoft.com/kb/906524/en-us
>
> >> We have installed in 3 desktops. No more authentication prompts. It works
> >> every single time. No issues so far (10 days). I haven't rebooted or
> >> logged
> >> off the desktop yet in the last 10 days. I just lockout the desktop when
> >> I
> >> am not using it.
>
> >> We are planning to push this to 100+ desktops next week. Will post back
> >> the
> >> results.
>
> >> --Sriram
>
> > -------------------------------------------------------------------------
> > This SF.net email is sponsored by DB2 Express
> > Download DB2 Express C - the FREE version of DB2 express and take
> > control of your XML. No limits. Just data. Click to get it now.
> >http://sourceforge.net/powerbar/db2/
>
> Markus
>
> <f... at gmx.eu> wrote in messagenews:20071126160414.298740 at gmx.net...
> > You can get rid of the loginbox by setting the option "KrbMethodK5Passwd"
> > to "off" in your Kerberos configuration (I would recomment this, because
> > this is the SSO you want).
> > But if you do this people will get "Access denied" instead of the loginbox
> > if Kerberos is not working.
>
> > Regards,
> > Florian
>
> > -------- Original-Nachricht --------
> >> Datum: Mon, 26 Nov 2007 07:20:42 -0800 (PST)
> >> Von: palm <palma1... at googlemail.com>
> >> An: kerbe... at mit.edu
> >> Betreff: Re: Apache + Kerberos + MS-AD = SSO / Problem with a Login Box
> >> for some Users
>
> >> thanks guys !!
>
> >> @florian
> >> i do all this things allready ....... browser are configured fine for
> >> kerberos
>
> >> @nikhil
> >> i check all the tickets and there seems to be everything okay but the
> >> login box pop's up ?!?! i dont know why and im still searching
> >> ________________________________________________
> >> Kerberos mailing list           Kerbe... at mit.edu
> >>https://mailman.mit.edu/mailman/listinfo/kerberos
> > ________________________________________________
> > Kerberos mailing list           Kerbe... at mit.edu
> >https://mailman.mit.edu/mailman/listinfo/kerberos