KfW requests ticket with wrong SPN

[1983-01-06@gmx.net]

> Hi,
> 
> 
> I have a Kerberos-based SSO system.  The Kerberos realm is
> "CORP.EXAMPLE.COM".  Every service has its own domain name, such as
> "imap.corp.example.com", "wiki.corp.example.com" and so on.
> 
> Now I can login these services on Debian sid.  But it always fails on
> Windows XP.
> 
> I've configured Firefox by setting the following preferences:
> 
>   network.negotiate-auth.trusted-uris = corp.example.com
>   network.negotiate-auth.using-native-gsslib = true
>   network.auth.use-sspi = false

Why did you disable SSPI? This works quite well with Unix-based servers.