spnego with mozilla

245 Views

Hi all,

I've configured spnego on a J2EE engine and the mechanism works with Internet Explorer. However, on mozilla browsers, eg. firefox I get the "GSSException: Failure unspecified at GSS-API level (Mechanism level: KDC has no support for encryption type (14))" message.

I got this message also with IE, but after a

registry" target="_blank">http://www.windowsitlibrary.com/Content/617/06/7.html">registry fix on the J2EE server, a JDK update (1.4.2_12) and an adjustment to kerb5.conf:

<i>[libdefaults]

default_tgs_enctypes=des-cbc-md5 des-cbc-cr des3-cbc-sha1

default_tkt_enctypes=des-cbc-md des-cbc-crc des3-cbc-sha1

permitted_enctypes = des-cbc-md5 des-cbc-crc des3-cbc-sha1</i>

it works like a charm.

Any ideas? SAP Note 942111 suggest to create a new keytab, but does this makes sense to do this jusst for Mozilla?

Cheers

Marcel