IBM Security Verify

 View Only
  • 1.  Kerberos - ISAM - http2

    Posted Mon August 23, 2021 10:02 AM
    Hi

    We are currently using Kerberos on our ISAM box which works fine using HTTP1.1

    However we would like to use HTTP2. Is that possible ? Our backend servers supports HTTP2, but when using Kerberos the connection gets downgraded to HTTP1.1.

    BR

    Poul

    ------------------------------
    Poul Jacobsen
    ------------------------------


  • 2.  RE: Kerberos - ISAM - http2

    Posted Fri August 27, 2021 07:12 AM
    Hi Poul,

    I wonder if @Scott Exton can help with this one?  Otherwise, you may need to open a support case.

    Jon.​​

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------



  • 3.  RE: Kerberos - ISAM - http2

    Posted Mon August 30, 2021 03:07 AM
    Jon,

    Unfortunately I don't have much experience in http2 and Kerberos.  I suspect that a support case might need to be opened so that the issue can be investigated. 

    Thanks.

    ------------------------------
    Scott Exton
    IBM
    Gold Coast
    ------------------------------



  • 4.  RE: Kerberos - ISAM - http2

    Posted Tue August 31, 2021 03:13 AM

    Hi Poul,

    This behaviour may depend on the back-end. For instance, it seems that IIS does not support Kerberos when it's configured for HTTP/2; it then falls back to HTTP/1.1. See this article: https://docs.microsoft.com/en-us/iis/get-started/whats-new-in-iis-10/http2-on-iis

    Kind regards,

    Peter.



    ------------------------------
    Peter Volckaert
    Senior Sales Engineer
    Authentication and Access
    IBM Security
    ------------------------------