Michael B Allen ioplex at gmail.com
Thu Sep 11 14:01:33 EDT 2008

On Thu, Sep 11, 2008 at 12:30 PM, Tuomas
<tuomaksen.spammiposti at gmail.com> wrote:
> I also found out using wireshark what Internet Explorer does when it
> fails to authenticate using Kerberos. It asks a ticket from the Active
> Directory server for HTTP/virtualhost.domain.com instead of
> HTTP/realname.domain.com. For me this seems like a bug in IE7, has
> anyone found solutions for this?

That's not a bug. You will need to add SPNs to the desired account
(using setspn) for each virtual hostname.


Michael B Allen
PHP Active Directory SPNEGO SSO

More information about the Kerberos mailing list