Many HTTP 401’s with Kerberos authentication via mod_auth_kerb

apache-2.2http-authenticationkerberos

I've got an Apache2 httpd running in front of a Tomcat, doing authentication via mod_auth_kerb.

When I open the console in Firebug, I see lots of 401's

See screenshot:

enter image description here

Is there a way to avoid this? I guess its causing an additional roundtrip which impacts performance.

Best Answer

No; the extra response and request are necessary for the SPNEGO authentication process, see RFC 4559 for details.

I'd recommend only forcing authentication of the sensitive resources. In your screenshot, it looks like only that very first request should be authenticated; you can probably set Satisfy Any on that /res directory.

Related Topic