Http Negotiate unsupported ?

I'm following the exercise presented here:

http://java.sun.com/javase/6/docs/technotes/guides/security/jgss/lab/part6.html

IIS says it can accept Negotiate or kerberos.

The application RunHttpSpnego fails with exception saying it received a response code 401 from the server.

If I configure IIS to accept Negotiate,NTLM the application works correctly failing back to ntlm.

Unfortunately I would like a stronger authentication than ntlm

Any suggestion ?

Thanks

[510 byte] By [setecastronomya] at [2007-11-27 0:52:17]
# 1
Normally this is because Kerberos is not configured correctly. Make sure all he necessary config files are present. If there's still problems, add -Dsun.security.krb5.debug=true to read the debug output.
wangwja at 2007-7-11 23:23:44 > top of Java-index,Security,Kerberos & Java GSS (JGSS)...
# 2

My problem was a missing semi-colon in the login.conf I was using.

In that case setting the enviroment variable you suggest to true is completely useless because nothing is written.

I must say it is not very friendly if it doesn't warn about syntax error in the configuration files. A missing semi-colon and you loose hour of work !

setecastronomya at 2007-7-11 23:23:44 > top of Java-index,Security,Kerberos & Java GSS (JGSS)...
# 3
Sorry for that. I'll see if we can enhance the parsing codes.Thanks for your post.
wangwja at 2007-7-11 23:23:44 > top of Java-index,Security,Kerberos & Java GSS (JGSS)...