title: login method fallback for SPNEGO in Websphere 7
body: <p>I am trying out the SPNEGO feature in Websphere 7.  I want to allow basic authentication in case of client not supporting SPNEGO.</p>
  
  <p>In my web.xml, I have </p>
  
  <pre><code>&lt;login-config&gt;
      &lt;auth-method&gt;BASIC&lt;/auth-method&gt;
      &lt;realm-name&gt;SampleApp Login&lt;/realm-name&gt;
  &lt;/login-config&gt; 
  </code></pre>
  
  <p>In admin console of Websphere, </p>
  
  <p>under <code>Security -&gt; Global Security -&gt; Web and SIP security -&gt; General settings</code>, I have <code>"Default to basic authentication when certificate authentication for the HTTPS client fails"</code> checked, </p>
  
  <p>and under <code>Security -&gt; Global Security -&gt; Web and SIP security -&gt; SPNEGO Web authentication</code>, I have "<code>Allow fall back to application authentication mechanism</code>" checked.</p>
  
  <p>When I am using client supports SPNEGO (e.g. IE) to access my web app, it seems fine.  However, when I switch to clients that do not support SPNEGO (e.g. Firefox), it simply shows a message "SPNEGO authentication is not supported on this client." , without prompting me for basic authentication.</p>
  
  <p>Can anyone give me some hints on what I may have missed?  Thanks a lot.</p>