SPNEGO without a domain

E

Emily

Hello,

Having a problem with Kerberos/SPNEGO authentication with a Windows XP
client. We have a non-Windows KDC and both Windows and non-windows clients.
On a unix-type machine, if I run kinit and authenticacate with the KDC, I
will get a TGT. Then, when I go to another intranet website that also
requires kerberos authentication, I am automagically given an HTTP ticket
(which I can see when I run klist) and allowed in the site. I want this same
functionality from winxp. I need this same functionality on a non-domained
windows client (and maybe domained ones as well, actually).

I've installed kerbtray which I think is whats given me the ability to do
the kinit/klist stuff on windows..

I really have no idea what to change. I've modified some firefox settings
to allow the browser to do spnego (setting
network.negotiate-auth.delegation-uris and
network.negotiate-auth.trusted-uris).

Does anyone know of a set specific instructions about this? If this is the
wrong forum for this type of question, also please let me know. Thanks :) :)
-- Emily
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Outlook 2007 intermittently prompting for credentials for E2k3 clu 1
Error logging into PWA 1
SSO, AD and Exchange via Entourage 2
Kerberos machine authentication 1
Outlook 2003 always prompting for network domain password 0
Domain logon issue 1
Outlook 2003 Prompting for Password on Internal Domain Client 1
Document Connection - Other Domain, HTTPS Connection 0

Top