284619 - kerberos(AD) Single-Sign-On won't work :(

Status: RESOLVED INVALID

(Firefox :: General, defect)

Description

[Klavs Klavsen]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050228 Firefox/1.0.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.6) Gecko/20050228 Firefox/1.0.1

Hi guys,

I understand there's a negotiate auth. patch, for firefox to look into apache
with kerberos tickets (either on win2k or on linux - or any other kerberos
platform). I've got modgssapache.sf.net installed in my apache, and it works
(with an MS AD as backend) on IE. Unfortunately firefox won't play - but I
understand there's a patch, that freebsd and Ubunto hoary has integrated - and I
was wondering what the plans are for including it in an official firefox release? 

Reproducible: Always

Steps to Reproduce:
1.install modgssapache.sf.net and setup/config it.
2.
3.

Actual Results:  
login not supported by firefox

Expected Results:  
forwarding of kerberos ticket (to intranet servers).
See here for details as how it works: http://www.onlamp.com/lpt/a/4171

http://www.onlamp.com/lpt/a/4171
http://negotiateauth.mozdev.org/installation.html

Comment 1

[Christopher Nebergall]

The NegotiateAuth extention from mozdev hasn't been required for some time,
support for the protocol is now part of Mozilla.  It works using Kerberos from
windows 2000+, Linux (probably any Linux distro with MIT kerberos), and Mac OS X.

See http://www.mozilla.org/projects/netlib/integrated-auth.html for configuring.

Closing bug.