Silently try more then one login handler with UnsolicitedSSO

Cantor, Scott cantor.2 at osu.edu
Thu Apr 25 11:18:50 EDT 2013


On 4/25/13 11:13 AM, "Douglas E. Engert" <deengert at anl.gov> wrote:

>Now the issue is how to get the Kerberos Login Handler to
>silently try SPNEGO, and if it fails, fall back to our normal
>login page.

I don't know anything of how SPNEGO works, but perhaps one could implement
the SPNEGO via Apache and mod_auth_kerb, and have a custom login handler
that looked for REMOTE_USER and if not set operated like the existing
UserPass handler.

I have been led to think that SPNEGO in general has no effective error
handling behavior and that if it doesn't work for everything it basically
becomes a problem, but if not, the above might work.

-- Scott




More information about the users mailing list