Re: [Freeipa-devel] Determine KDC for a website

2011-03-18 Thread Adam Young
On 03/18/2011 10:53 AM, Nalin Dahyabhai wrote: On Thu, Mar 17, 2011 at 08:03:14PM -0400, Adam Young wrote: I'm trying to figure out what should happen in the following case; A user goes to a website that they've never visited before. The site is using Kerberos, and thus the browser gets back a

Re: [Freeipa-devel] Determine KDC for a website

2011-03-18 Thread Nalin Dahyabhai
On Thu, Mar 17, 2011 at 08:03:14PM -0400, Adam Young wrote: > I'm trying to figure out what should happen in the following case; > > A user goes to a website that they've never visited before. > The site is using Kerberos, and thus the browser gets back a > "Negotiate" response. > > At this point

Re: [Freeipa-devel] Determine KDC for a website

2011-03-18 Thread Martin Kosek
On Thu, 2011-03-17 at 20:03 -0400, Adam Young wrote: > I'm trying to figure out what should happen in the following case; > > > A user goes to a website that they've never visited before. > The site is using Kerberos, and thus the browser gets back a "Negotiate" > response. > > At this point, t

[Freeipa-devel] Determine KDC for a website

2011-03-17 Thread Adam Young
I'm trying to figure out what should happen in the following case; A user goes to a website that they've never visited before. The site is using Kerberos, and thus the browser gets back a "Negotiate" response. At this point, the browser chops the hostname off the URL and requests the TXT rec