________________________________________ From: Felix Schumacher [felix.schumac...@internetallee.de] Sent: Friday, May 31, 2013 1:18 PM To: users@tomcat.apache.org Subject: Re: Tomcat7 and SPNEGO configuration questions
Am Freitag, den 31.05.2013, 10:17 -0500 schrieb Edward Siewick: >> Hi. >> >> I'm trying to get a baseline configuration working, following the >> http://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html. I'm >> apparently off in the weeds having missed something, though. So I'd really >> appreciate a sanity check of my configuration, and the testcase I'm >> attempting. I've got something messed up, and I'm looking for guidance on >> what to check. >> <snip> >> Well-founded guidance, clues, and even good guesses are all welcome. > I would look, if IE is sending an authorization header. Felix, Thanks. tcpdump shows an authz header, though it seems to be associated with the client's first call to the server. Let me know if I should be expecting some other packets in the exchange. It goes on for a few packets; the beginning of the Authorization: header from the client is below. Edward openid-wdw.openidmdev.com.50784 > openid-linux.openidmdev.com.webcache: Flags [.], seq 1:1461, ack 1, win 16425, length 1460 E...i.@...5> .!` .!a.`....._K...P.@). ..GET /manager/status HTTP/1.1^M Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, */*^M Accept-Language: en-US^M User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)^M Accept-Encoding: gzip, deflate^M Host: openid-linux.openidmdev.com:8080^M Connection: Keep-Alive^M Cookie: JSESSIONID=58B85BF870EA8328FC7A76D70C39EAF5^M Authorization: Negotiate YIIGpwYGKwYBBQUCoIIGmzCCBpegMDAuBgkqhkiC9xIBAgIGCSqGSIb3EgECAgYKKwYBBAGCNwICHgYKKwYBBAGCNwICCqKCBmEEggZdYIIGWQYJKoZIhvcSAQICAQBuggZIMIIGRKADAgEFoQMCAQ6iBwMFACAAAACjggTKYYIExjCCBMKgAwIBBaEQGw5PUEVOSURNREVWLkNPTaIuMCygAwIBAqElMCMbBEhUVFAbG29wZW5pZC1saW51eC5vcGVuaWRtZGV2LmNvbaOCBHcwggRzoAMCARehAwIBBqKCBGUEggRhtG1hWlctx9Ey75vGdQsRwKC5hNhuDW+qC4Kr2Dov2b/9TT94u8NZ30rqi4nJOKgK9VfcEsqgCwuLgnG0AdLmhXhaBYVk/p8xcJpXTeyUd3OOBVE1Z8BHD6fNlJ/c01o5r4iYV --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org