Internet Explorer always using NTLM instead of Kerberos

Asked Apr 22 '16 at 12:42

Active Apr 22 '16 at 14:00

Viewed 737 times

I am trying to browse my HDFS system from internet explorer but for some reason it is always using NTLM instead of Kerberos, so I receive the message

GSSException: Defective token detected (Mechanism level: GSSHeader did not find the right tag)

If I browse from Firefox (after setting the properties network.auth.use-sspi=false and network.negotiate-auth.trusted-uris=https://pd-vrt-21488) everything works fine.

In IE I added https://pd-vrt-21488:50470 to the list of local intranet sites and enabled “Integrated Windows Authentication”.

Looking at the request by using Fiddler I see the difference between Firefox using Kerberos and IE using NTLM. Firefox header:

Authorization: Negotiate YIICyAYGKwYB .....much more character.....V2HbPG57vXnQ7Vm7ba7MTJ7qzJ7zA7+1foY=

IE header:

Authorization: Negotiate TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==

Any ideas what’s wrong ?

edited Apr 22 '16 at 14:00

Martin

22,212
11
70
132

asked Apr 22 '16 at 12:42

Johan

Did you test it in a different machine? – seenukarthi Apr 26 '16 at 10:15
I used different client machines. – Johan Apr 28 '16 at 07:18
@Johan Did you find any solution? – payloc91 Jun 28 '18 at 13:55
wireshark can help identify the issue because it can decode the token – user1133275 Jan 07 '21 at 15:29

Internet Explorer always using NTLM instead of Kerberos

0 Answers0