[27101] in Kerberos
Re: Using kerberos ticket on web browsers
daemon@ATHENA.MIT.EDU (Diego Lima)
Wed Dec 6 12:31:12 2006
From: "Diego Lima" <diego-lima@prodesan.com.br>
To: Achim Grolms <kerberosml@grolmsnet.de>,
"Kerberos Mail List" <kerberos@mit.edu>
Date: Wed, 6 Dec 2006 14:29:33 -0300
Message-Id: <20061206172043.M29312@prodesan.com.br>
In-Reply-To: <200612061749.07451.kerberosml@grolmsnet.de>
MIME-Version: 1.0
X-PMS-MailScanner-From: diego-lima@prodesan.com.br
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
> Firefox can be configured to use Windows builtin "GSSAPI"
> (the correct name is "SSPI") or a third party GSSAPI implementation
> like KfW. use about:config
> dialog to choose the implementation you want to use.
I`ve been trying to do that for a while now. Here are my about:config settings
related to authentication:
network.auth.use-sspi true
network.automatic-ntlm-auth.allow-proxies true
network.automatic-ntlm-auth.trusted-uris [blank]
network.negotiate-auth.allow-proxies true
network.negotiate-auth.delegation-uris [blank]
network.negotiate-auth.gsslib [path to KfW]\lib\i386\gssapi32.lib
network.negotiate-auth.trusted-uris http://, https://
network.negotiate-auth.using-native-gsslib false
As far as I understood (I'm probably wrong at some point)
negotiate-auth.gsslib should be telling which SSPI firefox should use, right?
Do I need to change anything else?
--
Diego Alencar Alves de Lima
DINF - Prodesan (http://www.prodesan.com.br)
Prefeitura Municipal de Santos (http://www.santos.sp.gov.br)
--
Esta mensagem foi verificada pelo sistema de antivírus e
acredita-se estar livre de perigo.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
