]
Derek Horton updated SECURITY-854:
----------------------------------
Assignee: Darran Lofthouse (was: Derek Horton)
Fallback to FORM authentication when an invalid kerberos token is
used
----------------------------------------------------------------------
Key: SECURITY-854
URL:
https://issues.jboss.org/browse/SECURITY-854
Project: PicketBox
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Negotiation
Reporter: Derek Horton
Assignee: Darran Lofthouse
Negotiation will not fallback to FORM authentication if the client has a kerberos token
from a different KDC than what JBoss is configured to use.
This results in the user getting presented with a 401 error and no way to login.