[Freeipa-devel] solved + next problem :-(

[Byambaa Mendbayar]

Dear Rob,

Thank you very much for you response and kind help.

I have solved my problem it was I haven't use firefox from a console
which is defined KRB5_CONFIG=/etc/krb5_ipa.conf variable. It means I
have successes when I use /usr/sbin/firefox command from KRB5_CONFIG
variable defined console.

Thank you again Rob!

Now I trying to configure my LAN's clients to joining our freeIPA
server.

With kind regards,
Byambaa Mendbayar

On Mon, 2008-07-07 at 09:57 -0400, Rob Crittenden wrote:
> Byambaa Mendbayar wrote:
> > Dear devs,
> > 
> > I have solve my previous problem. It was blocked by firewall on my
> > freeIPA server. After that i have getting still another error on my
> > client's Firefox browser. It is a following on my browser:
> > 
> > -------------------------------------------------------- 
> > Kerberos Authentication Failed
> > Unable to verify your Kerberos credentials. Please make sure that you
> > have valid Kerberos tickets (obtainable via kinit), and that you have
> > configured your browser correctly. If you are still unable to access the
> > IPA Web interface, please contact the helpdesk on for additional
> > assistance.
> > 
> > Import the IPA Certificate Authority.
> > 
> > You can automatically configure your browser to work with Kerberos by
> > importing the Certificate Authority above and clicking on the Configure
> > Browser button.
> > 
> > You must reload this page after importing the Certificate Authority for
> > the automatic settings to work
> > 
> > -------------------------------------------------------- 
> > 
> > I have checked everything again, again on my client computer it was all
> > things OK (same stated in guideline). My client computer's OS is
> > openSUSE 11.0 (I have installed krb5-client for kinit) 
> > 
> > What's wrong on my work? Please help and advice to me.
> > 
> > Thanks and best regards,
> > Byambaa Mendbayar
> 
> Did you get a kerberos ticket yet?
> 
> If you had firefox running prior to obtaining a ticket you probably need 
> to restart firefox.
> 
> This page outlines how to debug the browser so you can better see what 
> is going on.
> 
> http://people.redhat.com/mikeb/negotiate/
> 
> rob
>