[Freeipa-users] WebUI With Windows, Firefox, and MIT Kerberos
JR Aquino
JR.Aquino at citrix.com
Tue Jan 31 06:48:56 UTC 2012
On Jan 30, 2012, at 6:12 PM, Adam Young wrote:
On 01/28/2012 01:53 PM, Erinn Looney-Triggs wrote:
On 1/27/2012 4:53 PM, JR Aquino wrote:
On Jan 27, 2012, at 5:31 PM, Jr Aquino wrote:
Has anyone successfully gotten firefox in windows with firefox and mit kerberos?
I've followed several how to's, but i cant get firefox to take/pass my tgt.
The Key to success:
network.negotiate-auth.gsslib: C:\Program Files\MIT\Kerberos\bin\gssapi32.dll
I had been previously using lib\i386/gssapi32.lib and thats what was breaking it.
The rest of the documentation on the FreeIPA site is sound.
We could probably stand to add that 1 line to the doc at http://freeipa.com/page/ClientConfigurationGuide
_______________________________________________
Freeipa-users mailing list
Freeipa-users at redhat.com<mailto:Freeipa-users at redhat.com>
https://www.redhat.com/mailman/listinfo/freeipa-users
The only other thing I would add here, at least for me, was on an x86_64
install of windows I needed to use: C:\Program Files
(x86)\MIT\Kerberos\bin\gssapi32.dll
-Erinn
OPPS! One other line I needed to change for firefox to work in windows:
network.auth.use-sspi: false
^ This tells firefox <not> to use the built-in AD based Kerberos/SSO.
I didn't realize I had missed this until I went back through from scratch to retest.
More information about the Freeipa-users
mailing list