[Freeipa-users] Help regarding Basic FreeIPA setup

[Simo Sorce]

On Mon, 2012-05-14 at 19:11 -0400, Dmitri Pal wrote:
> On 05/14/2012 05:25 PM, Chandan Kumar wrote:
> >
> > System: Centos 6.2
> > IPA version : ipa-server-2.1.3-9.el6.x86_64
> >
> >
> > Thanks
> > Chandan
> >
> >
> 
> I am not sure but seems like something is not properly configured with
> the browser.
> I do not remember seeing SPNEGO in the GSSAPI negotiation in this flow
> on a working configuration.
> But I will defer to experts.
> 
Firefox always uses SPNEGO.
HEre what fails is the init_sec_context, I assume the user does not have
a kerberos ticket, so spengo fails to find valid credentials for any of
the supported mechs and punts.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York