AW: Some Users get Basic Auth?

[Djihangiroff, Matthias (KC-DD)]

I've checked the browser settings, Integrated Windows Auth is checked.

Where can i configer the browser, that it use only Kerberos?
I didnt find any option.



-----Ursprüngliche Nachricht-----
Von: Michael B Allen [mailto:mba2000 at ioplex.com] 
Gesendet: Dienstag, 12. Juni 2007 19:18
An: Djihangiroff, Matthias (KC-DD)
Cc: kerberos at mit.edu
Betreff: Re: Some Users get Basic Auth?

On Tue, 12 Jun 2007 10:10:15 +0200
"Djihangiroff, Matthias (KC-DD)" <Matthias.Djihangiroff at persona.de> wrote:

> Hi, i have a huge problem.
> 
> Some of our Users get randomly the Basic Auth Box, some get it ALWAYS.
> 
> I sniffed the HTTP Trafic:
> 
> So the interesting line is "Authorization: Negotiate 
> TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw=="
> 
> That doesnt look like a Kerberos Service Ticket? Is that NTLM?

00000:  4e 54 4c 4d 53 53 50 00 01 00 00 00 07 82 08 a2  |NTLMSSP.........|
00010:  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |................|
00020:  05 01 28 0a 00 00 00 0f                          |..(.....        |

This is raw NTLMSSP. Check your browser settings.

Mike

--
Michael B Allen
PHP Active Directory Kerberos SSO
http://www.ioplex.com/
persona service Verwaltungs AG & Co. KG 
Freisenbergstraße 31 • 58513 Lüdenscheid  
Tel.: (02351) 950-0 • Fax: (02351) 950-222 
Sitz Lüdenscheid • Registergericht Iserlohn, HRA Nr. 2930

persönlich haftende Gesellschafterin: persona service AG
Gartenstraße 93 • CH-4002 Basel
Handelsregister Basel, Nr. CH-270.3.012.836-8
diese vertreten durch den Verwaltungsrat:
Dipl.-Ing. Werner Müller (Präsident) und Dr. Sebastian Burckhardt
www.persona.de