IE6 Fallback to NTLM

Jobo jobo at jobo.com
Tue Nov 11 02:19:46 EST 2008


Richard E. Silverman schreef:
>>>>>> "Jobo" == Jobo  <jobo at jobo.com> writes:
> 
>     Jobo> IE (6) and Kerberos At some (actually one) locations in our
>     Jobo> network (which is spread all over the Netherlands) we have the
>     Jobo> problem that IE6 randomly falls back to NTLM, while FF keeps on
>     Jobo> working flawlessly.
> 
>     Jobo> Does anybody has a clou what is happening? Tickets are valid and
>     Jobo> available, and when a new instance of IE is opened, everything
>     Jobo> works OK again.
> 
>     Jobo> The facts: Server: SLES 10 + Apache + mod_auth_kerb (Kerberos 5
>     Jobo> release 1.4.3) Client: IE6 on XP Tickets are served by Active
>     Jobo> Directory.
> 
>     Jobo> Thanks in advance, Johan Bosma (j.bosma (at) mindef.nl)
> 
> Is the name you're giving the browser for the webserver perhaps a DNS
> alias (CNAME RR)?  Bizarre and pointless as it is, Microsoft "doesn't like
> CNAMEs" (direct quote from a Microsoft engineer), and I've seen it behave
> like this.
> 
Thanks, a CNAME it is!
I gonna try your solution, it will take a couple or days, but I wil be back.



More information about the Kerberos mailing list