Is that possible to disable the BASIC Authentication when SPNEGO authentication failed

[Qingfeng Zhang]

Hi All,

Is that possible to get rid of the login pop up dialog when failed SPNEGO authentication and show CAS Login page directly?

Thanks,
Qingfeng Zhang

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[Giovanni Cocco]

Hi,
I have this behavior, I follow only instruction for SPNEGO
on CAS user wiki. Have you set network.negotiate-auth.trusted-uris
or similar if you are using Explorer?

GC

2009/9/21 qingfeng zhang <[hidden email]>:

> Hi All,
>
> Is that possible to get rid of the login pop up dialog when failed SPNEGO
> authentication and show CAS Login page directly?
>
> Thanks,
> Qingfeng Zhang
>
> --
> You are currently subscribed to [hidden email] as:
> [hidden email]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user

--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[Qingfeng Zhang]

I recorded a demo about that in three ways: http://qingfeng.tech.officelive.com/Documents/CAS%20Windows%20Desktop%20SSO.html
1. Browser supported.
2. Browser supported but not properly configured.
3. Browser not supported.

For the case 1 (Browser supported), the login flow is like this:
a. Browser check desktop credential.
b. if pass, get access.
c. if fail, get pop up dialog (HTTP Basic Authentication)

What I wanted is can we get rid of pop up dialog when failed authentication (step c)?

Thanks,
Qingfeng Zhang

2009/9/21 Giovanni Cocco <[hidden email]>

Hi,
I have this behavior, I follow only instruction for SPNEGO
on CAS user wiki. Have you set network.negotiate-auth.trusted-uris
or similar if you are using Explorer?

GC

2009/9/21 qingfeng zhang <[hidden email]>:

> Hi All,
>
> Is that possible to get rid of the login pop up dialog when failed SPNEGO
> authentication and show CAS Login page directly?
>
> Thanks,
> Qingfeng Zhang
>

> --
> You are currently subscribed to [hidden email] as:
> [hidden email]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user

--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[Qingfeng Zhang]

Solution found:

Skip SPNEGO for internet App.

Thanks,
Qingfeng Zhang

2009/9/22 qingfeng zhang <[hidden email]>

I recorded a demo about that in three ways: http://qingfeng.tech.officelive.com/Documents/CAS%20Windows%20Desktop%20SSO.html
1. Browser supported.
2. Browser supported but not properly configured.
3. Browser not supported.

For the case 1 (Browser supported), the login flow is like this:
a. Browser check desktop credential.
b. if pass, get access.
c. if fail, get pop up dialog (HTTP Basic Authentication)

What I wanted is can we get rid of pop up dialog when failed authentication (step c)?

Thanks,
Qingfeng Zhang

2009/9/21 Giovanni Cocco <[hidden email]>

Hi,
I have this behavior, I follow only instruction for SPNEGO
on CAS user wiki. Have you set network.negotiate-auth.trusted-uris
or similar if you are using Explorer?

GC

2009/9/21 qingfeng zhang <[hidden email]>:

> Hi All,
>
> Is that possible to get rid of the login pop up dialog when failed SPNEGO
> authentication and show CAS Login page directly?
>
> Thanks,
> Qingfeng Zhang
>

> --
> You are currently subscribed to [hidden email] as:
> [hidden email]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user

--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user