X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Finternal%2Fruntime%2Fjaas-ipa.cfg;h=0ef142f4aed07132db1d29a7145a1df5b5ede851;hb=e75cf778a87f1b2ef7cfc57339ccbf9657282e92;hp=be902ea6f9d9ce9ea96ce634cc03898b21bb0a01;hpb=e8969c9e02e73cb2a826e9e8a5c149b2b8520cba;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/runtime/jaas-ipa.cfg b/org.argeo.cms/src/org/argeo/cms/internal/runtime/jaas-ipa.cfg
index be902ea6f..0ef142f4a 100644
--- a/org.argeo.cms/src/org/argeo/cms/internal/runtime/jaas-ipa.cfg
+++ b/org.argeo.cms/src/org/argeo/cms/internal/runtime/jaas-ipa.cfg
@@ -2,6 +2,7 @@ USER {
     org.argeo.cms.auth.RemoteSessionLoginModule sufficient;
     org.argeo.cms.auth.SpnegoLoginModule optional;
     com.sun.security.auth.module.Krb5LoginModule optional
+     tryFirstPass=true
      storeKey=true;
     org.argeo.cms.auth.UserAdminLoginModule required;
 };
@@ -31,7 +32,8 @@ SINGLE_USER {
     com.sun.security.auth.module.Krb5LoginModule optional
      storeKey=true
      useTicketCache=true;
-    org.argeo.cms.auth.SingleUserLoginModule requisite;
+    org.argeo.cms.auth.SingleUserLoginModule required;
+    org.argeo.cms.auth.UserAdminLoginModule optional;
 };
 
 Jackrabbit {