kerberos authentication receiving 302 redirect rather than internal forward

[Konnie McCauley]

when authenticating from outside receiving two login pages. Receiving a 302 temporary move which looses the username and password. Need second authentication to log in. Where in the configuraiton files can we alter the 302 temporary move to an internal forward instead.

[Ellen Feaheny [AppFusions] · Accepted solution]

Thanks for contacting us direct so we can support you directly on this additional use cases so we can properly assist you.

Answers.atlassian.com is not the place for a custom config/network specific solution. As you know, the initial authenticator was per your site.

[Konnie McCauley]

Our confluence is set up as such:

Standalone Confluence 3.5.13 (one server) - a separate SQL server 2005

Open to outside access. When a user tries to access confluence from outside receive an initial login screen.

upon entering login information. Then prompted to enter login information again, then authenticated to confluence.

When watching wireshark - see severl 302 temporarily moved lines. I read that when you receive a 302 temporarily moved - the kerberos authentication is lost. Documentatio mentions that we should use internal forwards instead, which would keep the username and password information.

If this is the case, what needs to be entered and where is this entered

[Konnie McCauley]

By the way, Barney built our Kerberos authenticator

[Konnie McCauley]

We have done some serious packet watching and testing inside, outside, even on a computer that was inside but not in the domain. Here is where we are:

Can the Kerberos authenticator either:

- Permit NTLM as well or

- Drop the negotiation and only allow basic and Kerberos?

When accessing the site with Internet Explorer either outside or on a machine that is not in the domain you get the initial IE preferred authentication “ntlm”, then the authenticator rejects this and a new window pops up requesting “basic” authentication and success……

[David at David Simpson Apps]

Please expand on the problem you're having with a dash more detail.