Browser Kerberos Setup

Internet Explorer Configuration

Once you are able to log into the workstation with your kerberos key you should be able to use that ticket in Internet Explorer. For illustration purposes his page will use EXAMPLE.COM as the sample realm and example.com for the domain.

  1. Click the Security tab.
  2. Click Local intranet.
  3. Click Sites
  4. Click Advanced
  5. Add *.example.com to the list
  1. Click the Security tab.
  2. Click Local intranet.
  3. Click Custom Level
  4. Select Automatic logon only in Intranet zone.

Firefox Configuration

You can configure Firefox to use Kerberos for Single Sign-on. In order for this functionality to work correctly, you need to configure your web browser to send your Kerberos credentials to the appropriate KDC.The following section describes the configuration changes and other requirements to achieve this.

  1. In the address bar of Firefox, type about:config to display the list of current configuration options.

  2. In the Filter field, type negotiate to restrict the list of options.

  3. Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.

  4. Enter the name of the domain against which you want to authenticate, for example, .example.com.

  5. Repeat the above procedure for the network.negotiate-auth.delegation-uris entry, using the same domain.