SPNEGO problem with Firefox on Mac OS 10.4.9

Siarhei Baidun siarheibaidun at gmail.com
Fri May 11 05:01:42 EDT 2007


thank you for quick reply.
But I'm curious why Safari works?
As far as I could find Safari also relies on the native library
(GSSAPI-krb5) and does not have its own SPNEGO/kerberos implementation...

Siarhei Baidun

On 5/11/07, Moritz Bechler <mbechler at eenterphace.org> wrote:
> Hi,
> >
> > Firefox sends not SPNEGO token but KRB_AP_REQ token instead (which is in
> > fact should have been mechToken)
> >
> The Kerberos for MAC site says that OSX 10.4 includes KfM 5.5 which in
> turn includes a 1.4 kerberos library - that version does not support
> SPNEGO (introduced in 1.5). I don't know whether there is a newer version
> available somewhere (the windows version has been upgraded to 1.5 a week
> ago).
> Firefox does not include a SPNEGO implementation of its own and falls back
> to native GSSAPI-krb5 authentication because the library does not provide
> the SPNEGO mechanism.
> Moritz Bechler
> _______________________________________________
> krbdev mailing list             krbdev at mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev

More information about the krbdev mailing list