Thanks Matthieu, I'm not sure why NTLM is involved due to I have NTLMallowed set to false
<bean
class=
"org.jasig.cas.support.spnego.authentication.handler.support.JCIFSSpnegoAuthenticationHandler"
>
<property name="authentication">
<bean class="jcifs.spnego.Authentication"
/>
</property>
<property name="principalWithDomainName" value=
"false" />
<property name="NTLMallowed" value="false" />
</bean>
Chris Whittle
SWAT Team Developer
J.B. Hunt Transport Services, Inc.
Office Phone:(479) 419-3122
Ext:73122
Fax Phone:(479) 820-1769
[email protected]
What's your next move?TM
Intermodal | Dedicated | Truckload | LTL | Delivery | Refrigerated |
Flatbed | Expedited
Matthieu MARC <[email protected]>
07/08/2010 01:32 AM
Please respond to
[email protected]
To
[email protected]
cc
[email protected]
Subject
Re: [cas-dev] IE8 Outside the domain and Spegno
Hi,
CAS is not supporting NTLMv2 since it use Jcifs component which is not
supporting (and will never) NTLMv2 :
http://lists.samba.org/archive/jcifs/2008-October/008227.html
This is a problem since Windows Seven is configured by default to only use
NTLMv2.
The authentication popup raised by IE8 is the NTLM authentication. I think
there is no way to change it. The only thing to do is to make it working
for everyone. But without support of NTLMv2, the only way is to change the
configuration of Windows Seven computers to make them allow NTLMv1.
Cordialy,
Matthieu MARC
Le 07/07/2010 23:02, [email protected] a écrit :
We recently tried to role out CAS in production and ran into an issue that
we need some help with... Basically IE8 works fine with spegno internally
on the domain but when you try to access CAS externally and SPEGNO kicks
in instead of failing gracefully and sending the user to the Form it give
a authenitcation popup and if the user escapes it then gets the form....
Anyone have a fix for this?
Chris Whittle
SWAT Team Developer
J.B. Hunt Transport Services, Inc.
Office Phone:(479) 419-3122
Ext:73122
Fax Phone:(479) 820-1769
[email protected]
What's your next move?TM
Intermodal | Dedicated | Truckload | LTL | Delivery | Refrigerated |
Flatbed | Expedited
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-dev
--
Matthieu MARC
Service Informatique
Arts et Métiers ParisTech
<[email protected]>
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-dev
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-dev<<image/gif>>
<<image/gif>>
