Integrated Windows Authentication with IIS, Firefox and SQL Server

后端 未结 3 929
佛祖请我去吃肉
佛祖请我去吃肉 2020-12-14 03:12

I have a web site running on IIS on my localhost. This web site has directory security set to only allow Integrated Windows Authentication. It is part of an intranet and nee

3条回答
  •  甜味超标
    2020-12-14 03:38

    AS noted by Pontus Gagge, IIS needs to pass a Kerberos ticket to SQL Server. That was enough to tip my Google-fu in the right direction.

    Firefox supports Kerberos, but, you have to tell it which domains it trusts to send the Kerberos tokens too.

    1. Open Firefox
    2. In the address bar type: about:config
    3. Firefox3.x and later requires you to agree that you will proceed with caution.
    4. After the config page loads, in the filter box type: network.negotiate-auth
    5. Modify network.negotiate-auth.trusted-uris by double clicking the row and enter yourdomain.com
    6. Multiple domains can be added by comma delimiting them such as yourdomain.com, yourotherdomain.com

    Note: This is not the same as gbn's solution which just configures firefox to not prompt you to enter domain account details on login.

    Also, if you have already tried to authenticate through the stack in your current Firefox session, you will need to restart Firefox for this to work.

提交回复
热议问题