Michael Ströder michael at
Thu Jul 17 11:22:51 EDT 2008

Sharad Desai wrote:
>> You may want to search for SPNEGO and mod_auth_kerb. Windows IE and IIS
>> have SPNEGO built in, and can use the Kerberos in Active Directory.
>> Apache can use mod_auth_kerb that supports SPNEGO. With FireFox 2 on any
>> platform
>> see the about:config and the network.negotiate-auth.trusted-uris option.
> I would have definitely considered this, but the group that I am working
> with does not want to include AD in any solution.

It works with any Kerberos KDC.

I'm using CAS ( for SPNEGO/Kerberos 
with fall-back to LDAP bind.

Ciao, Michael.

More information about the Kerberos mailing list