Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to build an intranet site using joomla. The webserver is using HTTP Kerberos authentication with mod_kerb_auth. Everything works fine, the users get authenticated and so on. But if i try to login to the administrator panel i can't because IE does not accept the needed cookies. No such problem with firefox. The intranet site is called "intranet_new" and is hosted by webintranet04, under the directory /var/www/vhosts/joomla/intranet_new/.

I have my virtualhost for intranet_new containing this:

    <Location />
      AuthType Kerberos
      AuthName "Kerberos Login"
      KrbMethodNegotiate On
      KrbMethodK5Passwd On
      KrbAuthRealms PROV.TV.LOCAL
      Krb5KeyTab /etc/apache2/HTTP.keytab
      require valid-user
    </Location>

The same is for webintranet04 virtualhost, which is the default pointing to /var/www and contains:

    <Location /vhosts/joomla/>
      AuthType Kerberos
      AuthName "Kerberos Login"
      KrbMethodNegotiate On
      KrbMethodK5Passwd On
      KrbAuthRealms PROV.TV.LOCAL
      Krb5KeyTab /etc/apache2/HTTP.keytab
      require valid-user
    </Location>

the very strange problem i have is that if i open http:// webintranet04/vhosts/joomla/intranet_new/administrator IE allows me to login, accepting cookie. If i open http:// intranet_new/administrator, instead, i loop on the login page.

Last, intranet_new is a CNAME record of webintranet04.

This is only an IE problem. I need: - the admin interface to work with IE - the "kerberized" zone to accept cookie, because i am deploying other programs requiring cookies.

Edit: I'm using IE 8

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

Found the problem. Is not related to wrong configurations but to a wrong behaviour of IE, which is rejecting cookies from domains containing underscores.

More info here:

http://social.msdn.microsoft.com/Forums/en/iewebdevelopment/thread/8376e511-015d-4b8c-b0cd-88d6fb873526

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.