Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Dalšne informacije

Toś ta nitka jo se archiwěrowała. Pšosym stajśo nowe pšašanje, joli trjebaśo pomoc.

Kerberos Authentication Not Working on OS X 10.6

  • 1 wótegrono
  • 2 matej toś ten problem
  • 3 naglědy
  • Slědne wótegrono wót richardmm

richardmm
richardmm
more options

Using FF version 20.0, on OS X 10.6.8, I can not get it to use Kerberos authentication to allow SSO to a SharePoint web site.

On OS X 10.8, with the same configuration in the about:config, everything works fine - the user is not prompted for credentials.

I have put the necessary entires in network.negotiate-auth.delegation-uris and network.automatic-ntlm-auth.trusted-uris, network.negotiate-auth.gsslib is set to true.

When I have setup to log the errors from the authentication module, I find in the log file "Fail to load gssapi library".

Interestingly on 10.8, when I start Firefox from the command line the Kerberos authentication does not work. When I start it via the icon, it does. What is the difference? Are the preferences not being loaded when launching via the command line?

Thanks for any help, Richard

Using FF version 20.0, on OS X 10.6.8, I can not get it to use Kerberos authentication to allow SSO to a SharePoint web site. On OS X 10.8, with the same configuration in the about:config, everything works fine - the user is not prompted for credentials. I have put the necessary entires in network.negotiate-auth.delegation-uris and network.automatic-ntlm-auth.trusted-uris, network.negotiate-auth.gsslib is set to true. When I have setup to log the errors from the authentication module, I find in the log file "Fail to load gssapi library". Interestingly on 10.8, when I start Firefox from the command line the Kerberos authentication does not work. When I start it via the icon, it does. What is the difference? Are the preferences not being loaded when launching via the command line? Thanks for any help, Richard

Wubrane rozwězanje

Found the solution:

Was a combination of kinit being run on login (apparently a known 10.6 bug). Our Mac team were able to alter the appropriate plist file so that this does happen on login.

We also had to add an extra SPN for the actual server, as well as the DNS name of the SharePoint site we were trying to access with Kerberos authentication - although this may have something to do with using host-named site collections at the SharePoint end.

Main problem was the kinit thing though.

Toś to wótegrono w konteksće cytaś 👍 1

Wšykne wótegrona (1)

richardmm
richardmm Pšašaŕ
more options

Wubrane rozwězanje

Found the solution:

Was a combination of kinit being run on login (apparently a known 10.6 bug). Our Mac team were able to alter the appropriate plist file so that this does happen on login.

We also had to add an extra SPN for the actual server, as well as the DNS name of the SharePoint site we were trying to access with Kerberos authentication - although this may have something to do with using host-named site collections at the SharePoint end.

Main problem was the kinit thing though.