You must have "Use Windows Integrated Authentication" checked.

Bob Dodson

-----Original Message-----
From: [] On
Behalf Of
Sent: Wednesday, August 03, 2005 11:05 AM
Subject: Kerberos Digest, Vol 32, Issue 5

Send Kerberos mailing list submissions to

To subscribe or unsubscribe via the World Wide Web, visit
or, via email, send a message with subject or body 'help' to

You can reach the person managing the list at

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Kerberos digest..."

Today's Topics:

1. Re: Kerberos and IE Single Sign-on (Nikola Milutinovic)


Date: Tue, 02 Aug 2005 17:58:09 +0200
From: Nikola Milutinovic
To: Luciano Bolonheis
Subject: Re: Kerberos and IE Single Sign-on
Message-ID: <>
In-Reply-To: <>
References: <>
Content-Type: text/plain; charset=us-ascii; format=flowed
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Precedence: list
Message: 1

Luciano Bolonheis wrote:

>i'm trying to make a Single sign-on environment... and I have all the
>possible problems...
>using the mod_auth_kerb with apache in internet explorer, it
>authenticate but asks for the password. I get a ticket with the Kfw
>Leash32 application, and even with valid ticket is asks for the
>password. Someone know what can I do?

You should find out if IE is actually using the Kerberos ticket. I
recall some obscure option in IE config for that. For instance, in
Outlook Express, that option is SPA (Secure Password Authentication). If

you machine is in ADS, it will try GSS-API, otherwise, it will go for

I think IE has a similarly cryptic option name.


Kerberos mailing list

End of Kerberos Digest, Vol 32, Issue 5

Kerberos mailing list