On Mon, 2012-05-14 at 19:11 -0400, Dmitri Pal wrote: > On 05/14/2012 05:25 PM, Chandan Kumar wrote: > > > > System: Centos 6.2 > > IPA version : ipa-server-2.1.3-9.el6.x86_64 > > > > > > Thanks > > Chandan > > > > > > I am not sure but seems like something is not properly configured with > the browser. > I do not remember seeing SPNEGO in the GSSAPI negotiation in this flow > on a working configuration. > But I will defer to experts. > Firefox always uses SPNEGO. HEre what fails is the init_sec_context, I assume the user does not have a kerberos ticket, so spengo fails to find valid credentials for any of the supported mechs and punts.
Simo. -- Simo Sorce * Red Hat, Inc * New York _______________________________________________ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
