[Freeipa-users] WebUI With Windows, Firefox, and MIT Kerberos

JR Aquino JR.Aquino at citrix.com
Tue Jan 31 06:48:56 UTC 2012


On Jan 30, 2012, at 6:12 PM, Adam Young wrote:

On 01/28/2012 01:53 PM, Erinn Looney-Triggs wrote:

On 1/27/2012 4:53 PM, JR Aquino wrote:


On Jan 27, 2012, at 5:31 PM, Jr Aquino wrote:

Has anyone successfully gotten firefox in windows with firefox and mit kerberos?

I've followed several how to's, but i cant get firefox to take/pass my tgt.


The Key to success:

network.negotiate-auth.gsslib: C:\Program Files\MIT\Kerberos\bin\gssapi32.dll

I had been previously using lib\i386/gssapi32.lib and thats what was breaking it.

The rest of the documentation on the FreeIPA site is sound.

We could probably stand to add that 1 line to the doc at http://freeipa.com/page/ClientConfigurationGuide

_______________________________________________
Freeipa-users mailing list
Freeipa-users at redhat.com<mailto:Freeipa-users at redhat.com>
https://www.redhat.com/mailman/listinfo/freeipa-users


The only other thing I would add here, at least for me, was on an x86_64
install of windows I needed to use: C:\Program Files
(x86)\MIT\Kerberos\bin\gssapi32.dll

-Erinn


OPPS!  One other line I needed to change for firefox to work in windows:

network.auth.use-sspi: false


^ This tells firefox <not> to use the built-in AD based Kerberos/SSO.

I didn't realize I had missed this until I went back through from scratch to retest.




More information about the Freeipa-users mailing list