Jacob Block via FreeIPA-users <[email protected]> writes:
> I can at least confirm the behavior is the same on default FreeIPA 4.5
> with IE or Chrome on Windows 7, and Firefox also does not create the
> login prompt as was pointed out in the previous conversations. With
> the upstream patch to mod_auth_gssapi it would be nice if someone more
> knowledgeable might be able to re-visit this and offer new
> recommendations for FreeIPA admins.
Sure thing. Said patch is already present in Fedora, and is in RHEL
starting with RHEL-7.5 [1].
If this is an issue in your environment, then in the mod_auth_gssapi
config, set
BrowserMatch Windows gssapi-no-negotiate
Thanks,
--Robbie
1: https://bugzilla.redhat.com/show_bug.cgi?id=1309041
signature.asc
Description: PGP signature
_______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
