Forum Discussion
Kevin_Stewart
Sep 24, 2013Employee
Quick question.
Check for a currently logged in kerberos or NTLM session token in their session.
Kerberos is a per-site/name authentication mechanism. Though it would be technically possible (I believe) to do late-session Kerberos auth, the browser will generally either attempt Kerberos authentication with a server on initial access or it won't (when it first accesses a VIP for example). What would you expect initial access to look like, before going to the /secure URI?