<fix>
Don't register Contexts that fail to start with the Mapper. (markt)
</fix>
+ <add>
+ Add initial support for SPNEGO/Kerberos authentication also referred to
+ as integrated Windows authentication. This is a work in progress. See
+ the documentation for details. (markt)
+ </add>
</changelog>
</subsection>
<subsection name="Coyote">
<section name="Built-in Tomcat support">
<p><strong>This is a work in progress. This warning should be removed once the
various questions and TODOs (see the Javadoc and implementation class) have been
-resolved.</strong></p>
+resolved.</strong> In particular, onwards delegation is not yet supported and
+roles are not retrieved from the domain controller.</p>
<p>There are four components to the configuration of the built-in Tomcat
support for Windows authentication. The domain controller, the server hosting
Tomcat, the web application wishing to use Windows authentication and the client