We have configured a login module stack with SPNEGO and BasicPasswordLoginModule as fallback. SPNEGO works fine for internal users (users in the windows domain) and the BasicPasswordLoginModule as fallback also works when the security zone is "local intranet".
However when calling the portal externally or in general when the zone is NOT "local intranet" then the logon process comes with 1) an unexpected prompt (HTTP basic authentication) - and then 2) with the expected BasicPasswordLoginModule prompt.
Any explanation for this behaviour and how to avoid it?
Edited by: Tom Bo Larsen on Sep 19, 2008 8:49 AM