apache2/idp kerberos RemoteUserInternal with Password flow fallback

[Tunturi Timo]

On 28/07/15 16:34, Cantor, Scott wrote:
> On 7/28/15, 7:28 AM, "users on behalf of Tunturi Timo" <users-bounces at shibboleth.net on behalf of timo.tunturi at aalto.fi> wrote:
>
>> The fallback feature is in the browser. Browsers other than IE, anyway.
>
> Right, so, useless in the general case. All it takes is one.

That's right. Basically only because of IE there has to be a somewhat 
elaborate scheme on the IdP end to make sure you never offer a negotiate 
challenge unless the client can and will respond to it.