Acceldata
ODP

Accessing a Kerberized UI Firefox

To access a Kerberos-protected UI, Firefox must be configured to pass Kerberos credentials to the appropriate KDC (Key Distribution Center). Ensure you have the following prerequisites on your local machine:

  • krb5.conf (Kerberos configuration file)
  • Necessary keytab and principal for authentication

Follow these steps to configure Firefox:

  1. Open Firefox Configuration:
    1. In the Firefox address bar, type about:config and press Enter.
    2. Accept any warning messages, if prompted.
  2. Filter for Kerberos Settings:
    • In the search field, type negotiate to filter the configuration list.
  3. Set Trusted URIs:
    1. Double-click on network.negotiate-auth.trusted-uris to open the dialog box.
    2. Enter the domain(s) for which Kerberos authentication must be used (e.g., .example.com).

  1. Restart Firefox:
    1. After setting the trusted URIs, restart Firefox.
  2. Authenticate with Kerberos:
    1. Run kinit with the necessary keytab and principal.
kinit -kt example.keytab example@EXAMPLE.COM
Once authenticated, Firefox sends the Kerberos credentials to the domain specified, allowing access to the Kerberos-protected UI.