Apache + Kerberos + MS-AD = SSO / Problem with a Login Box for some Users

[Markus Moeller]

The following was posted a couple of month ago and might address your issue. 
Could you post back if it helped  ?


"Michael B Allen" <mba2000 at ioplex.com> wrote in message 
news:20070502022654.389f3da3.mba2000 at ioplex.com...
> Good job Sriram. I'm cc-ing the mod_auth_kerb list. They were talking 
> about
> this issue a while back.
>
> Mike
>
> On Tue, 1 May 2007 19:08:05 -0700 (PDT)
> SriramG <sgopalan at etrade.com> wrote:
>
>> Just wanted to update back, if anyone ends up with this issue.
>>
>> We contacted MS they provided a hotfix as mentioned on the KB
>>
>> http://support.microsoft.com/kb/906524/en-us
>>
>> We have installed in 3 desktops. No more authentication prompts. It works
>> every single time. No issues so far (10 days). I haven't rebooted or 
>> logged
>> off the desktop yet in the last 10 days. I just lockout the desktop when 
>> I
>> am not using it.
>>
>> We are planning to push this to 100+ desktops next week. Will post back 
>> the
>> results.
>>
>> --Sriram
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/


Markus



<f.d at gmx.eu> wrote in message news:20071126160414.298740 at gmx.net...
> You can get rid of the loginbox by setting the option "KrbMethodK5Passwd" 
> to "off" in your Kerberos configuration (I would recomment this, because 
> this is the SSO you want).
> But if you do this people will get "Access denied" instead of the loginbox 
> if Kerberos is not working.
>
> Regards,
> Florian
>
> -------- Original-Nachricht --------
>> Datum: Mon, 26 Nov 2007 07:20:42 -0800 (PST)
>> Von: palm <palma1977 at googlemail.com>
>> An: kerberos at mit.edu
>> Betreff: Re: Apache + Kerberos + MS-AD = SSO / Problem with a Login Box 
>> for some Users
>
>> thanks guys !!
>>
>> @florian
>> i do all this things allready ....... browser are configured fine for
>> kerberos
>>
>> @nikhil
>> i check all the tickets and there seems to be everything okay but the
>> login box pop's up ?!?! i dont know why and im still searching
>> ________________________________________________
>> Kerberos mailing list           Kerberos at mit.edu
>> https://mailman.mit.edu/mailman/listinfo/kerberos
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>