Hi, it is browser dialog: [image: Vložený obrázek 1] We try to turn off ntlm, so I think it is in cas.properties:
cas.spnego.ntlm.allowed=false -- s pozdravem Petr Gašparík solution architect gsm: [+420] 603 523 860 e-mail: [email protected] AMI Praha a.s. Pláničkova 11 162 00 Praha 6 tel.: [+420] 274 783 239 web: www.ami.cz [image: AMI Praha a.s.] [image: AMI Praha a.s.] <http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/audit-roli-a-opravneni-sap> Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s. jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu. 2017-04-06 11:49 GMT+02:00 'Philippe MARASSE' via CAS Community < [email protected]>: > Hello, > > How does look like step 2 dialog box ? I suspect it could be NTLM dialog > box shown by the browser. Have you disabled NTLM ? > > If you need login/passwd fallback, enable MixedMode Authentication. > > Regards. > > > Le 06/04/2017 à 10:46, Petr Gašparík - AMI Praha a.s. a écrit : > > Hi, > we integrated Apereo CAS with AD via SPNEGO, with fallback to LDAP. > > It works like this: > > 1. Try SPNEGO auth > 2. If it fails, show browser dialog for Kerberos login (L/P from AD) > 3. If it fails, show login page for LDAP auth > > > Now, how to get rid of step 2? > > Use case: > > 1. Try SPNEGO auth > 2. If it fails, show login page for LDAP auth > > Thanks! > Petr Gašparík > -- > - CAS gitter chatroom: https://gitter.im/apereo/cas > - CAS mailing list guidelines: https://apereo.github.io/cas/ > Mailing-Lists.html > - CAS documentation website: https://apereo.github.io/cas > - CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/c9b1459f-54ca-48a5-9b0f- > 868dadaf0b17%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/c9b1459f-54ca-48a5-9b0f-868dadaf0b17%40apereo.org?utm_medium=email&utm_source=footer> > . > > > -- > Philippe MARASSE > > Responsable pôle Infrastructures - DSIO > Centre Hospitalier Henri Laborit > CS 10587 - 370 avenue Jacques Cœur > 86021 Poitiers Cedex > Tel : 05.49.44.57.19 > > -- > - CAS gitter chatroom: https://gitter.im/apereo/cas > - CAS mailing list guidelines: https://apereo.github.io/cas/ > Mailing-Lists.html > - CAS documentation website: https://apereo.github.io/cas > - CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/2b1f9be3-22ba-9947-ec39- > ab2a2ac8a2cd%40ch-poitiers.fr > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/2b1f9be3-22ba-9947-ec39-ab2a2ac8a2cd%40ch-poitiers.fr?utm_medium=email&utm_source=footer> > . > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABAspd0OhT_4QZF6__M-tAowoz7fn0GN0wjJ7A1MdnR%3Dj29j4w%40mail.gmail.com.
