Re: [Freeipa-users] WebUI With Windows, Firefox, and MIT Kerberos

2012-01-30 Thread JR Aquino 
On Jan 30, 2012, at 6:12 PM, Adam Young wrote:

On 01/28/2012 01:53 PM, Erinn Looney-Triggs wrote:

On 1/27/2012 4:53 PM, JR Aquino wrote:


On Jan 27, 2012, at 5:31 PM, Jr Aquino wrote:

Has anyone successfully gotten firefox in windows with firefox and mit kerberos?

I've followed several how to's, but i cant get firefox to take/pass my tgt.


The Key to success:

network.negotiate-auth.gsslib: C:\Program Files\MIT\Kerberos\bin\gssapi32.dll

I had been previously using lib\i386/gssapi32.lib and thats what was breaking 
it.

The rest of the documentation on the FreeIPA site is sound.

We could probably stand to add that 1 line to the doc at 
http://freeipa.com/page/ClientConfigurationGuide

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


The only other thing I would add here, at least for me, was on an x86_64
install of windows I needed to use: C:\Program Files
(x86)\MIT\Kerberos\bin\gssapi32.dll

-Erinn


OPPS!  One other line I needed to change for firefox to work in windows:

network.auth.use-sspi: false


^ This tells firefox  to use the built-in AD based Kerberos/SSO.

I didn't realize I had missed this until I went back through from scratch to 
retest.

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] WebUI With Windows, Firefox, and MIT Kerberos

2012-01-30 Thread Adam Young 

On 01/28/2012 01:53 PM, Erinn Looney-Triggs wrote:

On 1/27/2012 4:53 PM, JR Aquino wrote:

On Jan 27, 2012, at 5:31 PM, Jr Aquino wrote:

Has anyone successfully gotten firefox in windows with firefox and mit kerberos?

I've followed several how to's, but i cant get firefox to take/pass my tgt.


The Key to success:

network.negotiate-auth.gsslib: C:\Program Files\MIT\Kerberos\bin\gssapi32.dll

I had been previously using lib\i386/gssapi32.lib and thats what was breaking 
it.

The rest of the documentation on the FreeIPA site is sound.

We could probably stand to add that 1 line to the doc at 
http://freeipa.com/page/ClientConfigurationGuide

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

The only other thing I would add here, at least for me, was on an x86_64
install of windows I needed to use: C:\Program Files
(x86)\MIT\Kerberos\bin\gssapi32.dll

-Erinn



___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Done.  Thanks to both of you  for contributing.

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] WebUI With Windows, Firefox, and MIT Kerberos

2012-01-28 Thread Erinn Looney-Triggs 
On 1/27/2012 4:53 PM, JR Aquino wrote:
> 
> On Jan 27, 2012, at 5:31 PM, Jr Aquino wrote:
> 
> Has anyone successfully gotten firefox in windows with firefox and mit 
> kerberos?
> 
> I've followed several how to's, but i cant get firefox to take/pass my tgt.
> 
> 
> The Key to success:
> 
> network.negotiate-auth.gsslib: C:\Program Files\MIT\Kerberos\bin\gssapi32.dll
> 
> I had been previously using lib\i386/gssapi32.lib and thats what was breaking 
> it.
> 
> The rest of the documentation on the FreeIPA site is sound.
> 
> We could probably stand to add that 1 line to the doc at 
> http://freeipa.com/page/ClientConfigurationGuide
> 
> ___
> Freeipa-users mailing list
> Freeipa-users@redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users

The only other thing I would add here, at least for me, was on an x86_64
install of windows I needed to use: C:\Program Files
(x86)\MIT\Kerberos\bin\gssapi32.dll

-Erinn



signature.asc
Description: OpenPGP digital signature
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] WebUI With Windows, Firefox, and MIT Kerberos

2012-01-27 Thread JR Aquino 

On Jan 27, 2012, at 5:31 PM, Jr Aquino wrote:

Has anyone successfully gotten firefox in windows with firefox and mit kerberos?

I've followed several how to's, but i cant get firefox to take/pass my tgt.


The Key to success:

network.negotiate-auth.gsslib: C:\Program Files\MIT\Kerberos\bin\gssapi32.dll

I had been previously using lib\i386/gssapi32.lib and thats what was breaking 
it.

The rest of the documentation on the FreeIPA site is sound.

We could probably stand to add that 1 line to the doc at 
http://freeipa.com/page/ClientConfigurationGuide

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

[Freeipa-users] WebUI With Windows, Firefox, and MIT Kerberos

2012-01-27 Thread JR Aquino 
Has anyone successfully gotten firefox in windows with firefox and mit kerberos?

I've followed several how to's, but i cant get firefox to take/pass my tgt.

-Jr

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users