If you already have SPNEGO configured correctly on the browser (e.g., native support in Mozilla/FireFox), this error can be caused if the solr host has two IP addresses and hostnames. If the local browser is using one hostname, but the solr internal hostname is different, solr will return a 401/Authentication Required. To resolve this, try accessing the alternate hostname, which may require setting up a local hosts file entry.