Sso login: KRB5NegotiateAuth::doAuthentication(): An unsupported mechanism was requested

[bbassotti]

Hi, I configured access to the UMC portal by following the instructions at the link:

Configuring Windows clients for single sign-on (SSO) with Kerberos logins

Starting with UCS 4.3, it’s possible to use Kerberos as authentication for SSO enabled services. This means that users log in to a Windows machine with their domain account and are automatically signed in to the UMC and other configured service providers. However, there are two settings in Windows that need to be changed for this to work. This can be achieved with a group policy object in Samba. Windows clients must be joined to the domain for this to work. Note: Single sign-on won’t work if …

but trying to log in I am asked to enter the credentials instead of the management page. the following is reported in the logs (/var/log/apache2/error.log):

AH01215: PHP Warning: KRB5NegotiateAuth::doAuthentication(): An unsupported mechanism was requested (65536,0) in /usr/share/simplesamlphp/modules/negotiate/lib/Auth/Source/Negotiate.php on line 143: /var/www/saml/php-cgi

what am I doing wrong?

thank you.