Odd. I don't remember setting that (it's set to ALTERNATIVE). But setting that to
DISABLED solved the problem. However, even if it is set to ALTERNATIVE, should it not
still fall back?
Hugh
-----Original Message-----
From: Marek Posolda [mailto:mposolda@redhat.com]
Sent: Monday, March 14, 2016 4:32 AM
To: Hugh Riley <hugh.riley(a)mni-news.com>; keycloak-user(a)lists.jboss.org
Subject: Re: [keycloak-user] Keycloak not falling back in Chrome
Hi,
according to the error, it seems that you switched "Kerberos"
authenticator to ALTERNATIVE or REQUIRED in "Authentication" tab in admin
console for Browser flow. However you didn't configure any LDAP or
Kerberos federation provider for your realm. You need to add the federation
provider and provide keytab, server principal etc. See docs for more details
[1].
[1]
http://keycloak.github.io/docs/userguide/keycloak-
server/html/kerberos.html#d4e2932
Marek