Open Bug 628210 Opened 10 years ago Updated 9 years ago

Kerberos authentication problem

Categories

(Firefox :: General, defect)

x86
Windows 7
defect
Not set
normal

Tracking

()

People

(Reporter: kkemenczy, Unassigned)

Details

Attachments

(1 file)

We have an internal web application that is configured to use Kerberos authentication. If you are authenticated on your workstation to the domain, than you are logged in automatically. If you are NOT authenticated to the domain than you are not able to log in, because Firefox doesn't display a login window (as IE and Chrome does) where you could enter your domain username and password.

We created debug logs in Firefox that show the authentication processes. The attached file contains these logs. All log were created on the same workstation with Firefox version 4 beta 9.

Firefox settings:

network.negotiate-auth.delegation-uris=telekom.intra
network.negotiate-auth.trusted-uris=telekom.intra
URL = https://test.iam.telekom.intra/IAM

1. Authenticated to the domain

1.1.only the negotiateauth module is logged

set NSPR_LOG_MODULES=negotiateauth:5
set NSPR_LOG_FILE=c:\firefox_in_domain_negotiateauth.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console

1.2. all modules are logged

set NSPR_LOG_MODULES=all:5
set NSPR_LOG_FILE=c:\firefox_in_domain_debug.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console


2. Not authenticated to the domain (local user)

2.1.  only the negotiateauth module is logged

set NSPR_LOG_MODULES=negotiateauth:5
set NSPR_LOG_FILE=c:\firefox_not_in_domain_negotiateauth.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console

2.2. all modules are logged

set NSPR_LOG_MODULES=all:5
set NSPR_LOG_FILE=c:\firefox_not_in_domain_debug.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console
anyone? enterprise team?
Are you sure IE and Chrome actually initilizate Kerberos ticket and not using other auth which is popup dialog for.
yes, i am sure
You need to log in before you can comment on or make changes to this bug.