spnego

[Michael B Allen]

On Thu, Sep 11, 2008 at 12:30 PM, Tuomas
<tuomaksen.spammiposti at gmail.com> wrote:
> I also found out using wireshark what Internet Explorer does when it
> fails to authenticate using Kerberos. It asks a ticket from the Active
> Directory server for HTTP/virtualhost.domain.com instead of
> HTTP/realname.domain.com. For me this seems like a bug in IE7, has
> anyone found solutions for this?

That's not a bug. You will need to add SPNs to the desired account
(using setspn) for each virtual hostname.

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/