<div> </div><div>Hello, Martin</div><div> </div><div>Before I wrote: Kerberos authentication FOR WINDOWS WEB SERVERS working successfully from Internet Explorer &amp; Forefox.</div><div>Kerberos authentication NOT working with oVirt Web-Portals.</div><div> </div><div>I expect that the users opening the oVirt web portal in the browser did not enter a password, and used instead of the transparent sign-on using Kerberos.<br />It is impossible ??</div><div> </div><div>03.10.2016, 09:08, "Martin Perina" &lt;mperina@redhat.com&gt;:</div><blockquote type="cite"><div><div style="font-family:arial,helvetica,sans-serif;">Hi Aleksey,<br /><br />in your last email you wrote that everything works (at least that's my understanding, email pasted below). So what exactly doesn't work for you?<br /><br />Regards<br /><br />Martin Perina<br /><br /><br />&gt; # kinit aleksey<br />&gt;<br />&gt; Password for <a href="mailto:aleksey@AD.HOLDING.COM">aleksey@AD.HOLDING.COM</a>: ***<br />&gt;<br />&gt; # klist<br />&gt;<br />&gt; Ticket cache: KEYRING:persistent:0:krb_ccache_9W86VN9<br />&gt; Default principal: <a href="mailto:aleksey@AD.HOLDING.COM">aleksey@AD.HOLDING.COM</a><br />&gt;<br />&gt; Valid starting       Expires              Service principal<br />&gt; 09/30/2016 16:50:32  10/01/2016 02:50:32  krbtgt/<a href="mailto:AD.HOLDING.COM@AD.HOLDING.COM">AD.HOLDING.COM@AD.HOLDING.COM</a><br />&gt;         renew until <span><span>10/07/2016 16:50:29</span></span><br />&gt;<br />&gt;<br />&gt; # curl --negotiate -u : -X GET -H "Accept: application/xml" -k <a href="https://kom-ad01-ovirt1.ad.holding.com/ovirt-engine/api" target="_blank">https://kom-ad01-ovirt1.ad.holding.com/ovirt-engine/api</a><br />&gt;<br />&gt; &lt;?xml version="1.0" encoding="UTF-8" standalone="yes"?&gt;<br />&gt; &lt;api&gt;<br />&gt;  ... output truncated ...<br />&gt; &lt;/api&gt;<br />&gt;<br />&gt; It Works.<br />&gt; The browsers are configured.<br />&gt; Kerberos authentication for Windows web servers working successfully from Internet Explorer &amp; Forefox<br /> </div></div><div> <div>On Mon, Oct 3, 2016 at 7:37 AM, <span>&lt;<a href="mailto:aleksey.maksimov@it-kb.ru" target="_blank">aleksey.maksimov@it-kb.ru</a>&gt;</span> wrote:<br /> <blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid;">Up<br /><br />30.09.2016, 18:55, "<a href="mailto:aleksey.maksimov@it-kb.ru">aleksey.maksimov@it-kb.ru</a>" &lt;<a href="mailto:aleksey.maksimov@it-kb.ru">aleksey.maksimov@it-kb.ru</a>&gt;:<br />&gt; Any other ideas?<br />_______________________________________________<br />Users mailing list<br /><a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br /><a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a></blockquote></div></div></blockquote>