Hi Achim, Following are the headers of the request and reply to and from the webserver.
Request from IE to the webserver: GET /iViewXT/login.do HTTP/1.1 Accept: */* Accept-Encoding: gzip, deflate Accept-Language: en-ie Host: gtci2736vm User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Connection: Keep-Alive Reply: HTTP/1.0 401 Authorization Required Date: Fri, 13 Jan 2006 09:50:14 GMT Server: Apache/2.0.53-dev (Unix) WWW-Authenticate: Negotiate WWW-Authenticate: Basic realm="Kerberos Login" Content-Length: 599 Connection: close Content-Type: text/html; charset=iso-8859-1 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>401 Authorization Required</title> </head><body> <h1>Authorization Required</h1> <p>This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.</p> <p>Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.</p> <hr> <address>Apache/2.0.53-dev (Unix) Server at gtci2736vm Port 443</address> </body></html> I hadn't seen that Kerberos Events were not trapped, so I'm going to check that out. It seems that IE is actually not requesting the HTTP ticket from the KDC. So hopefully the event viewer will show why. Thanks for your previous quick response. I'll keep this thread updated with my progress. Yannick ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos