If more than two HTTP/SPNEGO protected URLs are requested, and -Dhttp.auth.preference=Negotiate is set, the second request may fail.

This is not of high priority because the system property http.auth.preference is normally used to choose a weaker authentication scheme when multiple schemes are supported by the server. Currently, Negotiate is the strongest scheme, therefore, user seldom specifies the property as "Negotiate".