问题
I have an Intranet http application running on several machines in our Windows domain; everything works when using IE 7 because I can configure it to use Kerberos authentication and I've figured out how to get one of the intermediate machines to be Trusted for Delegation.
I have researched and tried to get Firefox 3.0.10 to use Kerberos:
- navigate to about:config
- filter to
network.negotiate - update
network.negotiate-auth.delegation-urisandnetwork.negotiate-auth.trusted-uriswith the following entries(separated by comma):http://jupiter2000/trimbrokerclient,http://johnxp/fileservicedemo
I have done this and even restarted Firefox and when I browse to the above sites on our LAN, I still get prompted for username and password and even when I supply them and the web page is loaded, I have some code in the app which displays the authentication method in effect and it is still NTLM, not Kerberos as when IE is used.
Can someone comment on how to get Firefox usable on this Intranet application of mine? Thank you.
p.s. while the names above are different, the app is the same. JUPITER2000 is IIS 6.0; JOHNXP is IIS 5.1.
回答1:
From what I have done myself, you will only want to input the domain, and not the http:// or path.
回答2:
There are 5 settings that need to be changed in FireFox. Only the domain is necessary.
See them all here:
FireFox settings for Integrated Windows Authentication
回答3:
you must use just the server name:
jupiter2000,johnxp
来源：https://stackoverflow.com/questions/809317/configure-firefox-3-0-x-to-authenticate-with-kerberos-and-not-prompt