SPNEGO problem with Firefox 2.0.0.3 on Mac OS 10.4.9

Siarhei Baidun siarheibaidun at gmail.com
Fri May 11 05:01:42 EDT 2007


Moritz,

thank you for quick reply.
But I'm curious why Safari works?
As far as I could find Safari also relies on the native library
(GSSAPI-krb5) and does not have its own SPNEGO/kerberos implementation...

--
Regards,
Siarhei Baidun

On 5/11/07, Moritz Bechler <mbechler at eenterphace.org> wrote:
>
> Hi,
>
> >
> > Firefox sends not SPNEGO token but KRB_AP_REQ token instead (which is in
> > fact should have been mechToken)
> >
>
> The Kerberos for MAC site says that OSX 10.4 includes KfM 5.5 which in
> turn includes a 1.4 kerberos library - that version does not support
> SPNEGO (introduced in 1.5). I don't know whether there is a newer version
> available somewhere (the windows version has been upgraded to 1.5 a week
> ago).
> Firefox does not include a SPNEGO implementation of its own and falls back
> to native GSSAPI-krb5 authentication because the library does not provide
> the SPNEGO mechanism.
>
>
> Moritz Bechler
> _______________________________________________
> krbdev mailing list             krbdev at mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev
>



More information about the krbdev mailing list