Hi maybe these steps can help you with you problem. If you are logging into an win AD server that is not on the same domain as the webserver, you must do the following on the client PC's Broswer to trust that site (so it sends kerb ticket)
1.In Internet Explorer, click Tools, and then click Internet Options. 2.Click the Security tab, then click Local intranet, then click Sites, and then click Advanced. 3.In the Add this Web site to the zone: text box, type the name of the website you want to authenticate to with Kerberos authentication, and then click Add. 4.Click OK. Regards. * Carpe diem Julio Cesar Parra Uribe E-mail: [EMAIL PROTECTED] T/L 877-2535 Ext phone: (5233)3669-7000 Ext. 2535 Project Manager SY-KRB-CP-EZ-HFS-BATS-RC-MN-REXX TRCTCPAPP-ISQL-QRY400 Guad Team. "Diego Lima" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 05/12/2006 06:35 To "Kerberos Mail List" <[email protected]> cc Subject Using kerberos ticket on web browsers I am curretly setting up a SSO environment using a Debian server as PDC (Samba+OpenLdap+Kerberos) and windows workstations (mostly windows XP). Everything is working fine so far except I can't use the kerberos ticket I get at logon on any windows internet browser. Curretly the ticket is cached both at krb5cc_username api and a file at the hard disk. I know both IE and Firefox support kerberos authentication to websites (server is an apache2 with kerberos authentication that is already working fine with linux clients), but they don't seem to understand that the ticket isn't on windows LSA API. Is there any way to set up either IE or Firefox and tell them where the ticket they should use is located? Or is there any way to place the kerberos ticket on windows LSA API? Thank you, -- Diego Alencar Alves de Lima DINF - Prodesan (http://www.prodesan.com.br) Prefeitura Municipal de Santos (http://www.santos.sp.gov.br) -- Esta mensagem foi verificada pelo sistema de antivírus e acredita-se estar livre de perigo. ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
