Jacob Block via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
writes:
I can at least confirm the behavior is the same on default FreeIPA
4.5
with IE or Chrome on Windows 7, and Firefox also does not create the
login prompt as was pointed out in the previous conversations. With
the upstream patch to mod_auth_gssapi it would be nice if someone more
knowledgeable might be able to re-visit this and offer new
recommendations for FreeIPA admins.
Sure thing. Said patch is already present in Fedora, and is in RHEL
starting with RHEL-7.5 [1].
If this is an issue in your environment, then in the mod_auth_gssapi
config, set
BrowserMatch Windows gssapi-no-negotiate
Thanks,
--Robbie
1:
https://bugzilla.redhat.com/show_bug.cgi?id=1309041