topic Re: explorer wonks out when using kerberos SSO in FF and safari in Alfresco Archive

explorer wonks out when using kerberos SSO in FF and safari

ofrxnz — Wed, 05 Aug 2009 18:24:11 GMT

So, in alfresco 3.2 i have configured kerberos to work for both cifs and http. everything works fine.when i turn on kerberos sso, IE authentication works great….however, when SSO is enabled the most current version of firefox will seem to authenticate and, redirect from http://<server>/alfres

Re: explorer wonks out when using kerberos SSO in FF and safari

esafonov — Thu, 01 Oct 2009 06:16:04 GMT

My situation looks the same: Only Internet Explorer 8 works with Alfresco SSO (Kerberos) login. Other browsers I tryed (Firefox 3.5 / Windows, Firefox 3.5 / Linux, IE 7) does not work, displaying a blank page and nothing more.

Alfresco use "WWW-Authenticate: Negotiate" method for Kerberos SSO.
Firefox need to be configured, to enable this authentication method. You can enable SSO authentication for a specific areas of network, in terms of host(s), or/and domain(s).

This one helped me with Firefox, go to

http://about:config‍

search for

network.negotiate-auth.trusted-uris‍

Change this parameter: to full hostname of your server, running alfresco, i.e.:

network.negotiate-auth.trusted-uris=my_alfresco_server.mydomain‍

After this, FF works with Kerberos SSO to this host.

Re: explorer wonks out when using kerberos SSO in FF and safari

xkahn — Tue, 10 Nov 2009 17:08:32 GMT

You may also need to make sure your Java install supports your Kerberos keytab. I was seeing errors with my key with was encrypted with "AES-256 CTS mode with 96-bit SHA-1 HMAC"

It took me quite a bit of debugging to discover that I needed to install "JCE Unlimited Strength Jurisdiction Policy Files 6 Release Candidate" from SUN.