We have configured Domino to use Windows single sign on (Kerberos) authentication. It appears to work in that we can open databases on the server without needing to enter a username and password. And I can navigate around (performing GETs) without any problems, including waiting several minutes between requests.
However, if I perform a POST request more than a couple of minutes after the last request, Domino does not seem to recognise the existing Domino LTPAToken cookie, and I get a 401 - Unauthorised error. (I can see in the Domino Log that the browser is sending it.) And Domino does not attempt to repeat the Kerberos authentication. POSTs work fine if made immediately after a previous request. Doing another GET request after a failure works fine too (without repeating the Kerberos authentication process) - so the Domino LTPAToken cookie is still valid.
Has anybody else seen this behaviour? I cannot believe this is a general issue with Domino Kerberos-based authentication, or there would be lots of other posts about it here. Any ideas what could be causing the problem?
Thanks