628210 - Kerberos authentication problem

Status: NEW

(Firefox :: General, defect)

Description

[Kalman Kemenczy]

Attachment: Kerberos authentication log

We have an internal web application that is configured to use Kerberos authentication. If you are authenticated on your workstation to the domain, than you are logged in automatically. If you are NOT authenticated to the domain than you are not able to log in, because Firefox doesn't display a login window (as IE and Chrome does) where you could enter your domain username and password.

We created debug logs in Firefox that show the authentication processes. The attached file contains these logs. All log were created on the same workstation with Firefox version 4 beta 9.

Firefox settings:

network.negotiate-auth.delegation-uris=telekom.intra
network.negotiate-auth.trusted-uris=telekom.intra
URL = https://test.iam.telekom.intra/IAM

1. Authenticated to the domain

1.1.only the negotiateauth module is logged

set NSPR_LOG_MODULES=negotiateauth:5
set NSPR_LOG_FILE=c:\firefox_in_domain_negotiateauth.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console

1.2. all modules are logged

set NSPR_LOG_MODULES=all:5
set NSPR_LOG_FILE=c:\firefox_in_domain_debug.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console


2. Not authenticated to the domain (local user)

2.1.  only the negotiateauth module is logged

set NSPR_LOG_MODULES=negotiateauth:5
set NSPR_LOG_FILE=c:\firefox_not_in_domain_negotiateauth.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console

2.2. all modules are logged

set NSPR_LOG_MODULES=all:5
set NSPR_LOG_FILE=c:\firefox_not_in_domain_debug.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console

Comment 1

[Kalman Kemenczy]

anyone? enterprise team?

Comment 2

[Nikolay Shopik]

Are you sure IE and Chrome actually initilizate Kerberos ticket and not using other auth which is popup dialog for.

Comment 3

[Kalman Kemenczy]

yes, i am sure