Forum Discussion

R_Marc_77962's avatar
R_Marc_77962
Icon for Nimbostratus rankNimbostratus
May 08, 2015

Kerberos SSO and AD password changes

I have an app utilizing APM for Cert auth then Kerberos SSO to the back end.   When users change their passwords, their kerberos ticket is no longer valid (so they are prompted for AD creds by the...
kunjan's avatar
kunjan
Icon for Nimbostratus rankNimbostratus
May 09, 2015

If restarting the session helps, how about sending a 302 redirect on 401 and forcing to start a new user session?

 

  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus
    May 09, 2015
    I plan on trying that, however if the ticket is still cached I think it'll still fail SSO. The default lifetime for kerberos tickets is 10 hours (600 minutes). The smallest I can set it is 10 minutes per the doco. We'll see if it works.