IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Kerberos - ISAM - http2

    Posted Mon August 23, 2021 10:02 AM
    Hi

    We are currently using Kerberos on our ISAM box which works fine using HTTP1.1

    However we would like to use HTTP2. Is that possible ? Our backend servers supports HTTP2, but when using Kerberos the connection gets downgraded to HTTP1.1.

    BR

    Poul

    ------------------------------
    Poul Jacobsen
    ------------------------------


  • 2.  RE: Kerberos - ISAM - http2

    Posted Fri August 27, 2021 07:12 AM
    Hi Poul,

    I wonder if @Scott Exton can help with this one?  Otherwise, you may need to open a support case.

    Jon.​​

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------



  • 3.  RE: Kerberos - ISAM - http2

    Posted Mon August 30, 2021 03:07 AM
    Jon,

    Unfortunately I don't have much experience in http2 and Kerberos.  I suspect that a support case might need to be opened so that the issue can be investigated. 

    Thanks.

    ------------------------------
    Scott Exton
    IBM
    Gold Coast
    ------------------------------



  • 4.  RE: Kerberos - ISAM - http2

    Posted Tue August 31, 2021 03:13 AM

    Hi Poul,

    This behaviour may depend on the back-end. For instance, it seems that IIS does not support Kerberos when it's configured for HTTP/2; it then falls back to HTTP/1.1. See this article: https://docs.microsoft.com/en-us/iis/get-started/whats-new-in-iis-10/http2-on-iis

    Kind regards,

    Peter.



    ------------------------------
    Peter Volckaert
    Senior Sales Engineer
    Authentication and Access
    IBM Security
    ------------------------------