Configure Firefox 3.0.x to authenticate with Kerberos and not prompt

John Adams picture John Adams · Apr 30, 2009 · Viewed 14.1k times · Source

I have an Intranet http application running on several machines in our Windows domain; everything works when using IE 7 because I can configure it to use Kerberos authentication and I've figured out how to get one of the intermediate machines to be Trusted for Delegation.

I have researched and tried to get Firefox 3.0.10 to use Kerberos:

  • navigate to about:config
  • filter to network.negotiate
  • update network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris with the following entries(separated by comma): http://jupiter2000/trimbrokerclient,http://johnxp/fileservicedemo

I have done this and even restarted Firefox and when I browse to the above sites on our LAN, I still get prompted for username and password and even when I supply them and the web page is loaded, I have some code in the app which displays the authentication method in effect and it is still NTLM, not Kerberos as when IE is used.

Can someone comment on how to get Firefox usable on this Intranet application of mine? Thank you.

p.s. while the names above are different, the app is the same. JUPITER2000 is IIS 6.0; JOHNXP is IIS 5.1.

Answer

Jordan S. Jones picture Jordan S. Jones · May 1, 2009

From what I have done myself, you will only want to input the domain, and not the http:// or path.