Kerberos auth module added
Kerberos auth module added
correct setup of login module
add magic X-Skip-Kerberos request header to forcefully disable SPNEGO authentication
Simplified configuration, and rough instructions
Simplified configuration, and rough instructions
Merge branch '5.6.0' of https://github.com/schambon/nuxeo-platform-login into 5.6.0
javaLoginConfig, realm, and kdc parameters are not necessary (javaLoginConfig is set in /jre/lib/security/java.security; realm and kdc are deduced from krb5.conf)
Remove dependencies on JCifs
Merge remote-tracking branch 'upstream/5.6.0' into nuxeo-platform-login-kerberos
Upgrade to 5.6.0-HF08-SNAPSHOT following upstream
Remove instructions to add JCifs libraries
Fix to support Chromium on Linux.

Note that Chrom(e|ium) needs to be started with the --auth-server-whitelist="hostname" switch
in order to attempt negotiation. Then it will send a message with the Oid for SPNEGO rather
than the Oid for Kerberos (as Firefox does). So we support both credentials.
Provide option to fallback to form authentication

In case of the client not knowing what to do with a Negotiate (eg there is no ticket to send) then provide a Refresh header to redirect to form auth after 1s.
Add debug message
Update instructions for Active Directory

Generate keytab with RC4-HMAC-NT crypto since that is what IE sends (tested in WinXP/Win2k3 environment)
Align with upstream/5.6.0 HEAD
Merge pull request #2 from schambon/nuxeo-platform-login-kerberos

Kerberos authenticator for Nuxeo 5.6