2011-01-20 14:39:59 -06:00
<!DOCTYPE html>
2007-09-24 14:20:34 -05:00
< html >
2008-05-20 08:43:31 -05:00
< head >
2011-01-20 14:39:59 -06:00
< meta charset = "utf-8" >
< title > IPA: Identity Policy Audit< / title >
2013-08-29 08:19:02 -05:00
< script type = "text/javascript" src = "../ui/js/libs/loader.js" > < / script >
2012-10-01 10:36:42 -05:00
< script type = "text/javascript" >
2013-08-29 08:19:02 -05:00
(function() {
function loaded() {
$(document).ready(function() {
var domain = '.' + (IPA_DOMAIN || 'example.com');
$('.example-domain').text(domain);
2012-10-01 10:36:42 -05:00
2014-03-31 07:03:28 -05:00
var browser = IPA.browser_config.get_browser();
if (browser.mozilla) {
2013-08-29 08:19:02 -05:00
var ff_config = $("#configurefirefox");
var obj = $('< object / > ', {
type: 'text/html',
'class': 'browser-config'
});
obj.prop('data', 'jar:/ipa/errors/configure.jar!/preferences.html');
obj.appendTo(ff_config);
ff_config.show();
}
2013-05-29 06:06:11 -05:00
});
2012-10-01 10:36:42 -05:00
}
2013-08-29 08:19:02 -05:00
var styles = [
2014-03-31 07:03:28 -05:00
'../ui/css/patternfly.css',
'../ui/css/ipa.css'
2013-08-29 08:19:02 -05:00
];
var scripts = [
'../ui/js/libs/jquery.js',
2014-03-31 07:03:28 -05:00
'krb.js',
'ffconfig.js'
2013-08-29 08:19:02 -05:00
];
ipa_loader.scripts(scripts, loaded);
ipa_loader.styles(styles);
})();
2012-10-01 10:36:42 -05:00
< / script >
2013-08-29 08:19:02 -05:00
2011-01-20 14:39:59 -06:00
< / head >
2007-09-24 14:20:34 -05:00
2011-10-11 02:42:35 -05:00
< body class = "info-page" >
2011-10-06 07:30:26 -05:00
2014-03-31 07:03:28 -05:00
< nav class = "navbar navbar-default navbar-pf" role = "navigation" >
< div class = "navbar-header" >
< a class = "brand" href = "../ui/index.html" > < img src = "../ui/images/header-logo.png" alt = "FreeIPA" > < / a >
< / div >
< / nav >
2011-10-06 07:30:26 -05:00
2014-03-31 07:03:28 -05:00
< div class = "container-fluid" >
< div class = "row" >
< div class = "col-sm-12" >
< div class = "ssbrowser" >
< h1 > Browser Kerberos Setup< / h1 >
< h2 > < img alt = "Internet Explorer" src = "../ui/images/ie-icon.png" > Internet Explorer Configuration< / h2 >
< p >
Once you are able to log into the workstation with your kerberos key you are now able to use that ticket in Internet Explorer.
< / p >
< p >
< strong > Login to the Windows machine using an account of your Kerberos realm (administrative domain)< / strong >
< / p >
< p >
< strong > In Internet Explorer, click Tools, and then click Internet Options.< / strong >
< / p >
< div >
< ol >
< li > Click the Security tab< / li >
< li > Click Local intranet< / li >
< li > Click Sites < / li >
< li > Click Advanced < / li >
< li > Add your domain to the list< / li >
< / ol >
< ol >
< li > Click the Security tab< / li >
< li > Click Local intranet< / li >
< li > Click Custom Level< / li >
< li > Select Automatic logon only in Intranet zone< / li >
< / ol >
2011-10-06 07:30:26 -05:00
2014-03-31 07:03:28 -05:00
< ol >
< li > Visit a kerberized web site using IE (You must use the fully-qualified Domain Name in the URL)< / li >
< li > < strong > You are all set.< / strong > < / li >
< / ol >
< / div >
2011-10-06 07:30:26 -05:00
2014-03-31 07:03:28 -05:00
< h2 > < img alt = "Firefox" src = "../ui/images/firefox-icon.png" > Firefox Configuration< / h2 >
2011-10-06 07:30:26 -05:00
2014-03-31 07:03:28 -05:00
< p >
You can configure Firefox to use Kerberos for Single Sign-on. The following instructions will guide you in configuring your web browser to send your Kerberos credentials to the appropriate Key Distribution Center which enables Single Sign-on.
< / p >
2011-10-06 07:30:26 -05:00
2014-03-31 07:03:28 -05:00
< ol >
< li >
In the address bar of Firefox, type < code > about:config< / code > to display the list of current configuration options.
< / li >
< li >
In the Filter field, type < code > negotiate< / code > to restrict the list of options.
< / li >
< li >
Double-click the < code > network.negotiate-auth.trusted-uris< / code > entry to display the Enter string value dialog box.
< / li >
< li >
Enter the name of the domain against which you want to authenticate, for example, < code class = "example-domain" > .example.com.< / code >
< / li >
< li > < strong > You are all set. < / strong > < / li >
< / ol >
2011-10-06 07:30:26 -05:00
2014-03-31 07:03:28 -05:00
< h3 > Automatic Configuration of older versions< / h3 >
< p > You can configure older versions of Firefox (up to version 14) using signed code. Use < a href = "browserconfig.html" > Firefox configuration page< / a > for newer versions.< / p >
< ol >
< li > Import < a href = "ca.crt" > CA certificate< / a > . Make sure you checked all three checkboxes.< / li >
< li >
Click on "Configure Browser" button below.
< div id = "configurefirefox" style = "display:none" > < / div >
< / li >
< / ol >
2011-10-06 07:30:26 -05:00
2014-03-31 07:03:28 -05:00
< / div >
< / div >
< / div >
< / div >
2007-09-24 14:20:34 -05:00
< / body >
2011-01-20 14:39:59 -06:00
2007-09-24 14:20:34 -05:00
< / html >
2011-01-20 14:39:59 -06:00
