Kerberos single sign on to a Java application

[Douglas E. Engert]

Singh wrote:
> Dear all,
> 
> We are having an issue in our environment, I would be really obliged
> if someone can propose a solution to what we mightbe doing wrong.
> 
> In essence Kerberos single sign on to a Java application using the MS
> IE browser will only work if the "use automatic configuration script"
> option is ticked in IE. If this is not ticked then the Kerberos
> request / ticket does not appear to be created and single sign on
> fails. We believe that the ISA may be translating or creating the
> Kerberos ticket for us and therefore bypassing it doesn't work.
> 
> 
Could you be more specific. Where is the "use automatic configuration
script" option in IE?

What version of IE?

What version of Java?

Where is the application running?

Kerberos usually is used to authenticate from a client to a server.
How are you trying to use Kerberos?

Is this a SPNEGO issue, where IE is authenticating to a web server
where your Java application is running?

Can you application do an tracing?

Do you have any NAT, PROXY or DNS issues?

> 
> Needless to say my Kerberos knowledge is very limited and I need
> someone to explain breifly how it works, so i can propse a solution.
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 
> 

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444