I am getting this Exception when I am trying to do SPNEGO on IE8 over HTTPS. It works fine for CHROME of FIREFOX.
com.wedgetail.idm.sso.ProtocolException: com.wedgetail.idm.spnego.server.SpnegoException: org.ietf.jgss.GSSException, major code: 1, minor code: 0
major string: Channel binding mismatch
minor string: None
at com.wedgetail.idm.sso.AbstractAuthenticator.processSpnego(AbstractAuthenticator.java:1221)
at com.wedgetail.idm.sso.MechChecker.authenticate(MechChecker.java:205)
at com.wedgetail.idm.sso.AbstractAuthenticator.authenticate(AbstractAuthenticator.java:1060)
at com.wedgetail.idm.sso.AbstractAuthenticator.authenticateServiceTicket(AbstractAuthenticator.java:998)
at com.wedgetail.idm.sso.AbstractAuthenticator.checkAuthentication(AbstractAuthenticator.java:953)
at com.wedgetail.idm.sso.AuthFilter.doFilter(AuthFilter.java:122)
When I set this registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\SuppressExtendedProtection to 0x02 , SPNEGO starts working but the problem is that this key cannot be set for all the machines in the environment. I am using Vintella 3.3. Is there any other workaround to get the SPNEGO going.
Message was edited by: aamir
Message was edited by: aamir
com.wedgetail.idm.sso.ProtocolException: com.wedgetail.idm.spnego.server.SpnegoException: org.ietf.jgss.GSSException, major code: 1, minor code: 0
major string: Channel binding mismatch
minor string: None
at com.wedgetail.idm.sso.AbstractAuthenticator.processSpnego(AbstractAuthenticator.java:1221)
at com.wedgetail.idm.sso.MechChecker.authenticate(MechChecker.java:205)
at com.wedgetail.idm.sso.AbstractAuthenticator.authenticate(AbstractAuthenticator.java:1060)
at com.wedgetail.idm.sso.AbstractAuthenticator.authenticateServiceTicket(AbstractAuthenticator.java:998)
at com.wedgetail.idm.sso.AbstractAuthenticator.checkAuthentication(AbstractAuthenticator.java:953)
at com.wedgetail.idm.sso.AuthFilter.doFilter(AuthFilter.java:122)
When I set this registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\SuppressExtendedProtection to 0x02 , SPNEGO starts working but the problem is that this key cannot be set for all the machines in the environment. I am using Vintella 3.3. Is there any other workaround to get the SPNEGO going.
Message was edited by: aamir
Message was edited by: aamir