Kerberos authentication problem

RESOLVED INACTIVE

Status

()

Firefox
General
RESOLVED INACTIVE
7 years ago
4 hours ago

People

(Reporter: Kalman Kemenczy, Unassigned)

Tracking

Trunk
x86
Windows 7
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

7 years ago
Created attachment 506316 [details]
Kerberos authentication log

We have an internal web application that is configured to use Kerberos authentication. If you are authenticated on your workstation to the domain, than you are logged in automatically. If you are NOT authenticated to the domain than you are not able to log in, because Firefox doesn't display a login window (as IE and Chrome does) where you could enter your domain username and password.

We created debug logs in Firefox that show the authentication processes. The attached file contains these logs. All log were created on the same workstation with Firefox version 4 beta 9.

Firefox settings:

network.negotiate-auth.delegation-uris=telekom.intra
network.negotiate-auth.trusted-uris=telekom.intra
URL = https://test.iam.telekom.intra/IAM

1. Authenticated to the domain

1.1.only the negotiateauth module is logged

set NSPR_LOG_MODULES=negotiateauth:5
set NSPR_LOG_FILE=c:\firefox_in_domain_negotiateauth.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console

1.2. all modules are logged

set NSPR_LOG_MODULES=all:5
set NSPR_LOG_FILE=c:\firefox_in_domain_debug.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console


2. Not authenticated to the domain (local user)

2.1.  only the negotiateauth module is logged

set NSPR_LOG_MODULES=negotiateauth:5
set NSPR_LOG_FILE=c:\firefox_not_in_domain_negotiateauth.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console

2.2. all modules are logged

set NSPR_LOG_MODULES=all:5
set NSPR_LOG_FILE=c:\firefox_not_in_domain_debug.log
"C:\Program Files\Mozilla Firefox\firefox.exe" -console
(Reporter)

Comment 1

7 years ago
anyone? enterprise team?

Comment 2

7 years ago
Are you sure IE and Chrome actually initilizate Kerberos ticket and not using other auth which is popup dialog for.
(Reporter)

Comment 3

7 years ago
yes, i am sure

Comment 4

4 hours ago
Per policy at https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Inactive_Bugs. If this bug is not an enhancement request or a bug not present in a supported release of Firefox, then it may be reopened.
Status: NEW → RESOLVED
Last Resolved: 4 hours ago
Resolution: --- → INACTIVE
You need to log in before you can comment on or make changes to this bug.