Content Management and Capture

Expand all | Collapse all

SPNEGO Authentication is not supported

  • 1.  SPNEGO Authentication is not supported

    Posted Fri November 20, 2020 10:38 AM
    Hi, 

    Anyone faced issue with authentication. Having issue with SPNEGO, getting error SPNEGO authentication is not supported on this client. Any suggestions to debug or resolve this issue.

    ------------------------------
    AJAY KUMAR
    ------------------------------


  • 2.  RE: SPNEGO Authentication is not supported

    Posted Mon November 23, 2020 01:42 AM
    Hi,

    did you configured WAS to use SPNEGO? Please also check your browser settings. It could be that the trusted URL for the ICN Server is not set in the Browser. So the logon credentials are not passed to the browser. Is it working for some clients or do you facing the issue on every client machine?

    ------------------------------
    Benjamin Just
    ------------------------------



  • 3.  RE: SPNEGO Authentication is not supported

    Posted Mon November 23, 2020 08:32 AM
    Hi,

    is this a new configuration or something working from before.
    are you sure the SPNEGO is working, check snoop and verify the Authorization is NEGOTIATE not BASIC.
    if it is NEGOTIATE then you need to check the client you are connecting from, is it in the same domain, is the browser configured

    regards.
    Sameh

    ------------------------------
    Sameh Mahmoud
    ------------------------------



  • 4.  RE: SPNEGO Authentication is not supported

    Posted Mon November 23, 2020 08:49 AM
    @Benjamin Just @Sameh Mahmoud Yes it is working for most of the clients and is an issue with only some clients. All the browser settings are same across all clients. And further debugging we found the client is not passing correct data, we are getting 400 Bad Request from filenet server, 

    Your browser sent a request that this could not understand.
    Size of a request header field exceeds server limit.  ​​

    ------------------------------
    AJAY KUMAR
    ------------------------------



  • 5.  RE: SPNEGO Authentication is not supported

    Posted Tue November 24, 2020 09:54 AM

    Hi,
    are you using IBM HTTP server? In this case maybe you are encountering this issue: Request Header Field Size Exceeds Limit for Web server (ibm.com),

    regards



    ------------------------------
    Alessio Barrese
    ------------------------------