[keycloak-dev] Kerberos with IE does not work

Marek Posolda mposolda at redhat.com
Wed Jul 22 05:45:59 EDT 2015

Hi Michael,

No idea if there is other solution, I've never tried SPNEGO with 
Internet explorer TBH :(

Could you please create JIRA for this?


On 22.7.2015 10:07, Michael Gerber wrote:
> Hi all
> My kerberos configuration works fine with FireFox and Chrome, but it 
> does not work with IE.
> It shows a prompt where the user has to enter a username and password.
> I can successfully get an access code, but I can not get an access 
> token, because IE overwrites the Authorization header in the AJAX 
> request. (see 
> http://stackoverflow.com/questions/28615850/internet-explorer-11-replaces-authorization-header)
> I can fix this by adding
> document.execCommand('ClearAuthenticationCache', 'false');
> above of
> var req = new XMLHttpRequest();
> approximately at the line 374 in the keycloack.js file.
> Is there another solution for this problem?
> cheers
> Michael
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20150722/8e196258/attachment.html 

More information about the keycloak-dev mailing list