Does anyone know why IE8 is failing over to NTLM outside a domain even when NTLMAllowed is set to false?
Chris Whittle
SWAT Team Developer
J.B. Hunt Transport Services, Inc.
Office Phone:(479) 419-3122
Ext:73122
Fax Phone:(479) 820-1769
chris_whit...@jbhunt.com
What's your next move?TM
Intermodal | Dedicated | Truckload | LTL | Delivery | Refrigerated |
Flatbed | Expedited
chris_whit...@jbhunt.com
07/08/2010 07:01 AM
Please respond to
cas-dev@lists.jasig.org
To
cas-dev@lists.jasig.org
cc
cas-dev@lists.jasig.org
Subject
Re: [cas-dev] IE8 Outside the domain and Spegno
Thanks Matthieu,
I'm not sure why NTLM is involved due to I have NTLMallowed set to false
<bean
class=
"org.jasig.cas.support.spnego.authentication.handler.support.JCIFSSpnegoAuthenticationHandler"
>
<property name="authentication">
<bean class="jcifs.spnego.Authentication"
/>
</property>
<property name="principalWithDomainName" value=
"false" />
<property name="NTLMallowed" value="false" />
</bean>
Chris Whittle
SWAT Team Developer
J.B. Hunt Transport Services, Inc.
Office Phone:(479) 419-3122
Ext:73122
Fax Phone:(479) 820-1769
chris_whit...@jbhunt.com
What's your next move?TM
Intermodal | Dedicated | Truckload | LTL | Delivery | Refrigerated |
Flatbed | Expedited
Matthieu MARC <matthieu.m...@ensam.eu>
07/08/2010 01:32 AM
Please respond to
cas-dev@lists.jasig.org
To
cas-dev@lists.jasig.org
cc
chris_whit...@jbhunt.com
Subject
Re: [cas-dev] IE8 Outside the domain and Spegno
Hi,
CAS is not supporting NTLMv2 since it use Jcifs component which is not
supporting (and will never) NTLMv2 :
http://lists.samba.org/archive/jcifs/2008-October/008227.html
This is a problem since Windows Seven is configured by default to only use
NTLMv2.
The authentication popup raised by IE8 is the NTLM authentication. I think
there is no way to change it. The only thing to do is to make it working
for everyone. But without support of NTLMv2, the only way is to change the
configuration of Windows Seven computers to make them allow NTLMv1.
Cordialy,
Matthieu MARC
Le 07/07/2010 23:02, chris_whit...@jbhunt.com a écrit :
We recently tried to role out CAS in production and ran into an issue that
we need some help with... Basically IE8 works fine with spegno internally
on the domain but when you try to access CAS externally and SPEGNO kicks
in instead of failing gracefully and sending the user to the Form it give
a authenitcation popup and if the user escapes it then gets the form....
Anyone have a fix for this?
Chris Whittle
SWAT Team Developer
J.B. Hunt Transport Services, Inc.
Office Phone:(479) 419-3122
Ext:73122
Fax Phone:(479) 820-1769
chris_whit...@jbhunt.com
What's your next move?TM
Intermodal | Dedicated | Truckload | LTL | Delivery | Refrigerated |
Flatbed | Expedited
--
You are currently subscribed to cas-dev@lists.jasig.org as:
matthieu.m...@angers.ensam.fr
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-dev
--
Matthieu MARC
Service Informatique
Arts et Métiers ParisTech
<matthieu.m...@ensam.eu>
--
You are currently subscribed to cas-dev@lists.jasig.org as:
chris_whit...@jbhunt.com
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-dev
--
You are currently subscribed to cas-dev@lists.jasig.org as:
chris_whit...@jbhunt.com
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-dev
--
You are currently subscribed to cas-dev@lists.jasig.org as:
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-dev<<image/gif>>
<<image/gif>>
<<image/gif>>
