Kerberos try shared password

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/kernel/jaas.cfg b/org.argeo.cms/src/org/argeo/cms/internal/kernel/jaas.cfg
index f3d5570721e4ec123d148ea6518dfb3dae108196..b5a32193d8b25f78ef7475e0a5cab7d216d62753 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/internal/kernel/jaas.cfg
+++ b/org.argeo.cms/src/org/argeo/cms/internal/kernel/jaas.cfg
@@ -1,7 +1,7 @@
 USER {
     org.argeo.cms.auth.HttpSessionLoginModule sufficient;
     org.argeo.cms.auth.SpnegoLoginModule optional;
-    com.sun.security.auth.module.Krb5LoginModule optional;
+    com.sun.security.auth.module.Krb5LoginModule optional tryFirstPass=true;
     org.argeo.cms.auth.UserAdminLoginModule sufficient;
 };