<html><body><div>Yes, kerberos works fine. </div><div><br></div><div>AuthorizeClientUtil.authorizeClient(authorizationHeader, formParams, event, realm); </div><div>throws an UnauthorizedException exception because the authorization header contains Negotiate xxx instead of Basic xxx.</div><div><br></div><div>Jira: https://issues.jboss.org/browse/KEYCLOAK-1595</div><div><br>Am 22. Juli 2015 um 14:23 schrieb Bill Burke <bburke@redhat.com>:<br><br></div><div><blockquote type="cite"><div class="msg-quote"><div class="_stretch"><span class="body-text-content"><span class="body-text-content">So, the problem isn't that kerberos doesn't work, its that code to token <br>doesn't work (neither does bearer)?<br><br>On 7/22/2015 4:07 AM, Michael Gerber wrote:<br></span></span><blockquote class="quoted-plain-text" type="cite">Hi all</blockquote><blockquote class="quoted-plain-text" type="cite"><br></blockquote><blockquote class="quoted-plain-text" type="cite">My kerberos configuration works fine with FireFox and Chrome, but it</blockquote><blockquote class="quoted-plain-text" type="cite">does not work with IE.</blockquote><blockquote class="quoted-plain-text" type="cite">It shows a prompt where the user has to enter a username and password.</blockquote><blockquote class="quoted-plain-text" type="cite"><br></blockquote><blockquote class="quoted-plain-text" type="cite">I can successfully get an access code, but I can not get an access</blockquote><blockquote class="quoted-plain-text" type="cite">token, because IE overwrites the Authorization header in the AJAX</blockquote><blockquote class="quoted-plain-text" type="cite">request. (see</blockquote><blockquote class="quoted-plain-text" type="cite"><a href="http://stackoverflow.com/questions/28615850/internet-explorer-11-replaces-authorization-header" data-mce-href="http://stackoverflow.com/questions/28615850/internet-explorer-11-replaces-authorization-header">http://stackoverflow.com/questions/28615850/internet-explorer-11-replaces-authorization-header</a>)</blockquote><blockquote class="quoted-plain-text" type="cite"><br></blockquote><blockquote class="quoted-plain-text" type="cite">I can fix this by adding</blockquote><blockquote class="quoted-plain-text" type="cite">document.execCommand('ClearAuthenticationCache', 'false');</blockquote><blockquote class="quoted-plain-text" type="cite">above of</blockquote><blockquote class="quoted-plain-text" type="cite">var req = new XMLHttpRequest();</blockquote><blockquote class="quoted-plain-text" type="cite">approximately at the line 374 in the keycloack.js file.</blockquote><blockquote class="quoted-plain-text" type="cite"><br></blockquote><blockquote class="quoted-plain-text" type="cite">Is there another solution for this problem?</blockquote><blockquote class="quoted-plain-text" type="cite"><br></blockquote><blockquote class="quoted-plain-text" type="cite">cheers</blockquote><blockquote class="quoted-plain-text" type="cite">Michael</blockquote><blockquote class="quoted-plain-text" type="cite"><br></blockquote><blockquote class="quoted-plain-text" type="cite"><br></blockquote><blockquote class="quoted-plain-text" type="cite">_______________________________________________</blockquote><blockquote class="quoted-plain-text" type="cite">keycloak-dev mailing list</blockquote><blockquote class="quoted-plain-text" type="cite"><a href="mailto:keycloak-dev@lists.jboss.org" data-mce-href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a></blockquote><blockquote class="quoted-plain-text" type="cite"><a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" data-mce-href="https://lists.jboss.org/mailman/listinfo/keycloak-dev">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a></blockquote><blockquote class="quoted-plain-text" type="cite"><br></blockquote><span class="body-text-content"><br>-- <br>Bill Burke<br>JBoss, a division of Red Hat<br><a href="http://bill.burkecentral.com" data-mce-href="http://bill.burkecentral.com">http://bill.burkecentral.com</a><br>_______________________________________________<br>keycloak-dev mailing list<br><a href="mailto:keycloak-dev@lists.jboss.org" data-mce-href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br><a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" data-mce-href="https://lists.jboss.org/mailman/listinfo/keycloak-dev">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a><br></span></div></div></blockquote></div></body></html>