[27103] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Using kerberos ticket on web browsers

daemon@ATHENA.MIT.EDU (Diego Lima)
Wed Dec 6 13:30:41 2006

From: "Diego Lima" <diego-lima@prodesan.com.br>
To: Achim Grolms <kerberosml@grolmsnet.de>
Date: Wed, 6 Dec 2006 15:29:34 -0300
Message-Id: <20061206181705.M41627@prodesan.com.br>
In-Reply-To: <200612061849.56054.kerberosml@grolmsnet.de>
MIME-Version: 1.0
X-PMS-MailScanner-From: diego-lima@prodesan.com.br
Cc: Kerberos Mail List <kerberos@mit.edu>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit

On Wed, 6 Dec 2006 18:49:53 +0100, Achim Grolms wrote

> > network.auth.use-sspi                      true
> 
> if true this means Firefox uses the Win32-API (calles SSPI).
> Set this to false to use a 3rd party GSSAPI.

Whenever I set this to false my browser stops trying to negotiate (it simply
won't reply). 

> BTW: does the kvno test work?
> I am using it to detect if the underlying GSSAPI works
> in general.

C:\Documents and Settings\chambinho>kvno HTTP/estagiario6.sso.com.br@SSO.COM.BR
HTTP/estagiario6.sso.com.br@SSO.COM.BR: kvno = 7

I guess it works

> > network.negotiate-auth.using-native-gsslib false
> 
> Switch this to "true" to make KfW work.
> 

Doesn't seem to make any difference wether it's true or false. I have tried
installing firefox on another machine and try, but I'm getting the same
behaviour there. Were you able to get this working on windows using Firefox 2?

Thanks,

--
Diego Alencar Alves de Lima
DINF - Prodesan (http://www.prodesan.com.br)
Prefeitura Municipal de Santos (http://www.santos.sp.gov.br)


-- 
Esta mensagem foi verificada pelo sistema de antivírus e
 acredita-se estar livre de perigo.

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


home help back first fref pref prev next nref lref last post