Loading...

XML

Word

Printable

Steps to Reproduce:

Hide

Get a token from a different KDC than what JBoss is configured to use. Hit a Negotiation protected endpoint. This will result in a 401.

With the patch applied, it is possible to fallback to form authentication.

Show
Get a token from a different KDC than what JBoss is configured to use. Hit a Negotiation protected endpoint. This will result in a 401. With the patch applied, it is possible to fallback to form authentication.
Git Pull Request:
https://github.com/wildfly-security/jboss-negotiation/pull/19
Bugzilla References:
https://bugzilla.redhat.com/show_bug.cgi?id=1131225, https://bugzilla.redhat.com/show_bug.cgi?id=1131229, https://bugzilla.redhat.com/show_bug.cgi?id=1133098, https://bugzilla.redhat.com/show_bug.cgi?id=1133099

Negotiation will not fallback to FORM authentication if the client has a kerberos token from a different KDC than what JBoss is configured to use.

This results in the user getting presented with a 401 error and no way to login.