[ https://issues.jboss.org/browse/JBDS-3188?page=com.atlassian.jira.plugin.... ] Christos Triantafyllidis commented on JBDS-3188: ------------------------------------------------ Not sure if that helps but to authenticate with kerberos SPNEGO should be used (http://en.wikipedia.org/wiki/SPNEGO) i.e. from curl that can be done as: $ curl -Ik --negotiate -u : https://broker.openshift.server/console HTTP/1.1 401 Authorization Required Cache-control: no-cache="set-cookie" Content-Type: text/html; charset=iso-8859-1 Date: Fri, 19 Dec 2014 09:12:56 GMT Server: Apache/2.2.15 (Red Hat) Set-Cookie: .... WWW-Authenticate: Negotiate WWW-Authenticate: Basic realm="OpenShift Developer Console" Connection: keep-alive HTTP/1.1 302 Found Cache-Control: no-cache, private Cache-control: no-cache="set-cookie" Content-Type: text/html; charset=utf-8 Date: Fri, 19 Dec 2014 09:12:56 GMT Location: https://broker.openshift.server/console/applications Server: Apache/2.2.15 (Red Hat) Set-Cookie: ... Status: 302 WWW-Authenticate: Negotiate ... X-Frame-Options: SAMEORIGIN X-Powered-By: Phusion Passenger (mod_rails/mod_rack) 3.0.21 X-Rack-Cache: miss X-Request-Id: 56f64b154afe079a8ed30b315466cd4c X-Runtime: 0.001557 X-UA-Compatible: IE=Edge,chrome=1 Connection: keep-alive -- This message was sent by Atlassian JIRA (v6.3.11#6341)