IE6 Fallback to NTLM

Richard E. Silverman res at qoxp.net
Mon Nov 10 22:27:53 EST 2008


>>>>> "Jobo" == Jobo  <jobo at jobo.com> writes:

    Jobo> IE (6) and Kerberos At some (actually one) locations in our
    Jobo> network (which is spread all over the Netherlands) we have the
    Jobo> problem that IE6 randomly falls back to NTLM, while FF keeps on
    Jobo> working flawlessly.

    Jobo> Does anybody has a clou what is happening? Tickets are valid and
    Jobo> available, and when a new instance of IE is opened, everything
    Jobo> works OK again.

    Jobo> The facts: Server: SLES 10 + Apache + mod_auth_kerb (Kerberos 5
    Jobo> release 1.4.3) Client: IE6 on XP Tickets are served by Active
    Jobo> Directory.

    Jobo> Thanks in advance, Johan Bosma (j.bosma (at) mindef.nl)

Is the name you're giving the browser for the webserver perhaps a DNS
alias (CNAME RR)?  Bizarre and pointless as it is, Microsoft "doesn't like
CNAMEs" (direct quote from a Microsoft engineer), and I've seen it behave
like this.

-- 
  Richard Silverman
  res at qoxp.net




More information about the Kerberos mailing list