|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |
Message-ID: <4B4CD855.3080107@anl.gov> Date: Tue, 12 Jan 2010 14:15:17 -0600 From: "Douglas E. Engert" <deengert@anl.gov> MIME-Version: 1.0 To: Sylvain RICHET <akamanouche@gmail.com> In-Reply-To: <8fe270c5-e439-4727-b53e-70e779d688a1@f5g2000yqh.googlegroups.com> Cc: kerberos@mit.edu Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: kerberos-bounces@mit.edu Sylvain RICHET wrote: > On 11 jan, 21:47, Phil Pishioneri <p...@psu.edu> wrote: >> On 1/11/10 12:40 PM, Russ Allbery wrote: >> >>> That page doesn't discuss how to configure Firefox to find the GSS-API >>> library on UNIX at run-time, ... >> Firefox config preference is named "network.negotiate-auth.gsslib". >> >> -Phil > > Hi Phil, > > Indeed, i have already tried to set Firefox entries like this : > > network.negotiate-auth.using-native-gsslib = false > > network.negotiate-auth.gsslib = /usr/lib/libgssapi_krb5.so.2.2 > > But nothing better ! Since you said rebuilding did not help, some other simple questions to ask: Have you tried Wireshark or other analyzer to see what might be going on? Do you have a krb5.conf file? Does the web server support GSS? What is the server? Does the client have user credentials? (klist) Have you posted the problem on modauthkerb-help@lists.sourceforge.net (I expect most of the people are on this list too.) Since you built FireFox, what code did it use for the native-gsslib? Is it Java? > So i set back (reset) this entries > > I have also heard about an entry named "network.auth.use-sspi". > (e.g see: http://www.helpdesk.umd.edu/topics/applications/kerberos/4782/) SSPI is the native Microsoft API that can inter operate with the GSS-API on other platforms. Does the Kerberos you are trying to use o the client have support for SPNEGO? > But it doesn't appear in Firefox/Ubuntu(Linux). > > Many browse, but still no workaround. > Following Russ advice, I'm going to look for the way to compile > Firefox with GSSAPI/NegotiateAuth option... > > > ________________________________________________ > Kerberos mailing list Kerberos@mit.edu > https://mailman.mit.edu/mailman/listinfo/kerberos > > -- Douglas E. Engert <DEEngert@anl.gov> Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |