[jboss-jira] [JBoss JIRA] (SECURITY-722) SPNEGO-fallback-to-FORM authentication does not work with httpd+JBossEAP6 if SPNEGO not available

[RH Bugzilla Integration (JIRA)]

    [ https://issues.jboss.org/browse/SECURITY-722?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13058335#comment-13058335 ] 

RH Bugzilla Integration commented on SECURITY-722:
--------------------------------------------------

Ondrej Lukas <olukas at redhat.com> changed the Status of [bug 1085501|https://bugzilla.redhat.com/show_bug.cgi?id=1085501] from ON_QA to VERIFIED

> SPNEGO-fallback-to-FORM authentication does not work with httpd+JBossEAP6 if SPNEGO not available
> -------------------------------------------------------------------------------------------------
>
>                 Key: SECURITY-722
>                 URL: https://issues.jboss.org/browse/SECURITY-722
>             Project: PicketBox 
>          Issue Type: Bug
>          Components: Negotiation
>    Affects Versions: Negotiation_2_2_1
>         Environment: RHEL6, JBoss EAP 6
>            Reporter: flame liu
>            Assignee: Derek Horton
>             Fix For: Negotiation_2_2_8, Negotiation_2_3_0_CR2
>
>
> I configured SPNEGO in EAP6. It works well both with EAP only and EAP6 + Apache httpd(mod_proxy). Users just run kinit and will be able to be successfully authenticated.
> After that, I added the fallback-to-form files/configurations both in the web app and standalone-full.xml. The fallback-to-form works only if httpd stops. If httpd starts, 401 error will always be thrown out.



--
This message was sent by Atlassian JIRA
(v6.3.11#6341)