Internet explorer rejects cookies in kerberos protected intranet sites
- by remix_tj
I'm trying to build an intranet site using joomla. The webserver is using HTTP Kerberos authentication with mod_kerb_auth. Everything works fine, the users get authenticated and so on. But if i try to login to the administrator panel i can't because IE does not accept the needed cookies. No such problem with firefox.
The intranet site is called "intranet_new" and is hosted by webintranet04, under the directory /var/www/vhosts/joomla/intranet_new/.
I have my virtualhost for intranet_new containing this:
<Location />
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate On
KrbMethodK5Passwd On
KrbAuthRealms PROV.TV.LOCAL
Krb5KeyTab /etc/apache2/HTTP.keytab
require valid-user
</Location>
The same is for webintranet04 virtualhost, which is the default pointing to /var/www and contains:
<Location /vhosts/joomla/>
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate On
KrbMethodK5Passwd On
KrbAuthRealms PROV.TV.LOCAL
Krb5KeyTab /etc/apache2/HTTP.keytab
require valid-user
</Location>
the very strange problem i have is that if i open http:// webintranet04/vhosts/joomla/intranet_new/administrator IE allows me to login, accepting cookie. If i open http:// intranet_new/administrator, instead, i loop on the login page.
Last, intranet_new is a CNAME record of webintranet04.
This is only an IE problem.
I need:
- the admin interface to work with IE
- the "kerberized" zone to accept cookie, because i am deploying other programs requiring cookies.
