Configure Firefox 3.0.x to authenticate with Kerberos and not prompt

Question

I have an Intranet http application running on several machines in our Windows domain; everything works when using IE 7 because I can configure it to use Kerberos authentication and I've figured out how to get one of the intermediate machines to be Trusted for Delegation.

I have researched and tried to get Firefox 3.0.10 to use Kerberos:

• navigate to about:config
• filter to network.negotiate
• update network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris with the following entries(separated by comma): http://jupiter2000/trimbrokerclient,http://johnxp/fileservicedemo

I have done this and even restarted Firefox and when I browse to the above sites on our LAN, I still get prompted for username and password and even when I supply them and the web page is loaded, I have some code in the app which displays the authentication method in effect and it is still NTLM, not Kerberos as when IE is used.

Can someone comment on how to get Firefox usable on this Intranet application of mine? Thank you.

p.s. while the names above are different, the app is the same. JUPITER2000 is IIS 6.0; JOHNXP is IIS 5.1.

Answer 1

There are 5 settings that need to be changed in FireFox. Only the domain is necessary.

See them all here:

FireFox settings for Integrated Windows Authentication

Answer 2

you must use just the server name:

jupiter2000,johnxp

Answer 3

From what I have done myself, you will only want to input the domain, and not the http:// or path.