SPNEGO Authentication Question

[George Hosler]

At KUMC, we have SPNEGO authentication enabled in our CAS Server, and integration with our AD Domain is working correctly.  Now, we've been asked about integrating with our affiliate Hospital's AD domain.  We have users that exist in both domains, and data is synced between domains for them.  

In the kerberos configuration, it appears we can specify multiple realms/domains for integration.  However, we've not been able to get the other domains working.  So I thought I'd find out if:

1. Anyone knows if the SPNEGO authentication plugin will support multiple domains/realms?  

2. If it will, has anyone made that successfully work?

Thanks,

George Hosler

Identity Management Engineer

University of Kansas Medical Center