The Cool-ade Blog: Mac-Windows, Information Security and Technology. » Firefox http://www.cool-ade.co.uk The Cool-ade Blog: Mac-Windows, Information Security and Technology. Sat, 24 Jul 2010 20:02:42 +0000 http://wordpress.org/?v=2.8.6 en hourly 1 Firefox and Windows Integrated Authentication http://www.cool-ade.co.uk/firefox-and-windows-integrated-authentication http://www.cool-ade.co.uk/firefox-and-windows-integrated-authentication#comments Fri, 01 Jan 2010 09:00:46 +0000 admin http://www.cool-ade.co.uk/?p=174 Firefox can authenticate with Active Directory using Kerberos single sign-on. It works on both Macs and PCs. This allows automatic authentication to intranets or specific internal company websites.

See http://www.mozilla.org/projects/netlib/integrated-auth.html for the specifics on how it works.

Launch Firefox.  In the URL Field type about:config
ffadac1

Look for the following three preference names:

  • network.automatic-ntlm-auth.trusted-uris
  • network.negotiate-auth.delegation-uris
  • network.negotiate-auth.trusted-uris.

Double click on each preference name and add ‘http://yourwebsite-1, http://yourwebsite-2, yourActiveDirectoryDomainName’ to its value field. You can add more sites as required.

Close the about:config windows and the following entries will be written into your prefs.js file which resides in the the Firefox User Profile directory:

  • user_pref(”network.automatic-ntlm-auth.trusted-uris”, “http://yourwebsite-1, http://yourwebsite-2, yourADdomain”);
  • user_pref(”network.negotiate-auth.delegation-uris”, “http://yourwebsite-1, http://yourwebsite-2, yourADdomain.com”);
  • user_pref(”network.negotiate-auth.trusted-uris”, “http://yourwebsite-1, http://yourwebsite-2, yourADdomain.com”

You have now configured Firefox to use Integrated Authentication on your network.

]]> http://www.cool-ade.co.uk/firefox-and-windows-integrated-authentication/feed 0