August 10, 2004

Negotiate (kerberos) web authentication in Mozilla...

Summary document posted here. I'm hoping to add more to that document in the near future. This feature is especially handy if your organization uses Kerberos to authenticate users on the intranet. Previously, this meant that you would only be able to use IE.

Since Mozilla 1.7, Mozilla has supported Kerberos on Unix-like systems (including Mac OSX). Starting with Mozilla 1.7.3 (unless there's another security firedrill between now and september'ish), Mozilla 1.8, and Firefox 1.0, it will be supported on Windows as well. However, Kerberos is not enabled by default... the doc explains all.

Update: Looks like Andrew Bartlett is working to add SPNEGO support to Squid (http://www.squid-cache.org/mail-archive/squid-dev/200407/0012.html). Mozilla currently ignores Negotiate challenges for proxy auth, so it seems like we will need to rework some things in Mozilla in order for his changes to Squid to be useful with Mozilla.

Posted by darin at August 10, 2004 11:12 PM
Comments

This is great! People are always complaining that "seamless" login between our server application and their intranets don't work when using Mozilla.

This, alongside WebDAV support, would really help Mozilla be the killer client-app for our servers.

Posted by: Vidar Braut Haarr at August 11, 2004 12:27 PM

I agree completely, Mozilla makes it all better.

Posted by: Johnathon Rice at August 13, 2004 9:41 AM

Thanks for adding this Darin. I can now use Firefox at work and seamlessly login to Intranet websites.

Posted by: Manoj Mehta at August 17, 2004 12:55 AM

Darin,

Has this gone into Aviary builds yet? If yes, how do I enable this feature?

- Manoj

Posted by: Manoj Mehta at August 24, 2004 6:28 PM

Manoj,

See http://www.mozilla.org/projects/netlib/integrated-auth.html for instructions on configuring Mozilla's preferences. All of the code has been backported to the Aviary and 1.7 branches, so either download a nightly Firefox branch build (ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-0.9/) or wait for the next preview release (which should be out in about a week).

Posted by: Darin Fisher at August 24, 2004 9:28 PM

Darin,

Just wanted to say a big thank you for fixing bug 231529! I've wanted this for so long so that I can easily use FireFox (or mozilla) at work.

Thanks so much!
Lloyd

Posted by: Lloyd Cotten at August 27, 2004 10:19 AM