On Thu, Sep 11, 2008 at 12:30 PM, Tuomas <[EMAIL PROTECTED]> wrote: > I also found out using wireshark what Internet Explorer does when it > fails to authenticate using Kerberos. It asks a ticket from the Active > Directory server for HTTP/virtualhost.domain.com instead of > HTTP/realname.domain.com. For me this seems like a bug in IE7, has > anyone found solutions for this?
That's not a bug. You will need to add SPNs to the desired account (using setspn) for each virtual hostname. Mike -- Michael B Allen PHP Active Directory SPNEGO SSO http://www.ioplex.com/ ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
