On Fri, 2011-05-13 at 00:05 +0200, Daniel Stenberg wrote:
> > 3) If Negotiate fails using kerberos, then it should fallback to ntlm, which
> > is not working at all here
>
> libcurl actually doesn't fall back to another auth. It picks the one auth type
> it thinks is best out of the ones the server offers and if that fails, the
> request fails. Why would it fall back and do another try?

In Windows environments it seems quite common for Kerberos support to be
*claimed* but not actually functional. We need to fall back to NTLM in
that case.

IE and Firefox get this right, I believe, but Chrome does not:
http://code.google.com/p/chromium/issues/detail?id=82646

-- 
dwmw2
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html