Configuring web browsers to support KerberosAdded by IBM on February 2, 2011 | Version 1 (Original)
|Configure your web browser to support Kerberos authentication.
Configure your web browser to support Kerberos authentication.
About this task
To edit the web browser preferences, complete the following steps:
Do one of the following:
- Microsoft® Internet Explorer:
Mozilla Firefox: Add the Lotus Connections web address to the list of sites that are permitted to engage in SPNEGO authentication with the browser by completing the following steps:
- From the Internet Explorer menu, select Tools -> Internet Options, and then click the Security tab.
- Click the Local intranet icon, and then click Sites.
- Click Advanced, and then add the web address of the host name of the IBM® Lotus® Connections server into the Add this website to the zone field. For example: *.enterprise.example.com.
- Click OK to save the change and return to the main Security page.
- Click Custom level, scroll to find User Authentication -> Logon, and then select Automatic logon only in Intranet zone. Click OK to save the change and return to the main Security page.
- Click the Advanced tab, scroll to find Security, and then select Enable Integrated Windows Authentication. Click OK to save the change.
- Restart the web browser to apply the configuration changes.
- Open Firefox, and type about:config into the location bar.
- Type network.n into the Filter field, double-click network.negotiate-auth.trusted-uris, and then type the protocol and host name of the server that hosts Lotus Connections. For example: http://enterprise.example.com or https://enterprise.example.com if you want to use HTTPS. To specify more than one server, separate the host names with a comma.
- Click OK to save the change.
- If the deployed SPNEGO solution is using the advanced Kerberos application of Credential Delegation, double-click network.negotiate-auth.delegation-uris. This preference defines the sites for which the browser can delegate user authorization to the server. Enter a comma-delimited list of trusted domains or URLs.
- Restart Firefox to apply the configuration change.
Parent topic: Enabling single sign-on for the Windows desktop
Previous topic: Configuring SPNEGO on IBM HTTP Server
Enabling single sign-on for Tivoli Access Manager with SPNEGO