2011-01-20 15:39:59 -05:00
<!DOCTYPE html>
2007-09-24 15:20:34 -04:00
< html >
2008-05-20 09:43:31 -04:00
< head >
2011-01-20 15:39:59 -05:00
< meta charset = "utf-8" >
< title > IPA: Identity Policy Audit< / title >
2013-08-29 15:19:02 +02:00
< script type = "text/javascript" src = "../ui/js/libs/loader.js" > < / script >
2012-10-01 17:36:42 +02:00
< script type = "text/javascript" >
2013-08-29 15:19:02 +02:00
(function() {
function loaded() {
$(document).ready(function() {
var domain = '.' + (IPA_DOMAIN || 'example.com');
$('.example-domain').text(domain);
2012-10-01 17:36:42 +02:00
2013-08-29 15:19:02 +02:00
if ($.browser.mozilla) {
var ff_config = $("#configurefirefox");
var obj = $('< object / > ', {
type: 'text/html',
'class': 'browser-config'
});
obj.prop('data', 'jar:/ipa/errors/configure.jar!/preferences.html');
obj.appendTo(ff_config);
ff_config.show();
}
2013-05-29 13:06:11 +02:00
});
2012-10-01 17:36:42 +02:00
}
2013-08-29 15:19:02 +02:00
var styles = [
'../ui/jquery-ui.css',
'../ui/ipa.css',
'ipa_error.css'
];
var scripts = [
'../ui/js/libs/jquery.js',
'krb.js'
];
ipa_loader.scripts(scripts, loaded);
ipa_loader.styles(styles);
})();
2012-10-01 17:36:42 +02:00
< / script >
2013-08-29 15:19:02 +02:00
2011-01-20 15:39:59 -05:00
< / head >
2007-09-24 15:20:34 -04:00
2011-10-11 09:42:35 +02:00
< body class = "info-page" >
2011-10-06 14:30:26 +02:00
2011-10-11 09:42:35 +02:00
< div class = "container_1 ssbrowser" >
2011-01-20 15:39:59 -05:00
< div class = "header-logo" >
2011-10-26 16:06:17 -05:00
< img src = "../ui/images/ipa-logo.png" / > < img src = "../ui/images/ipa-banner.png" / >
2011-10-06 14:30:26 +02:00
< / div >
< div class = "textblockkrb" >
2011-10-11 09:42:35 +02:00
< h1 > Browser Kerberos Setup< / h1 >
2011-10-26 16:06:17 -05:00
< img alt = "Internet Explorer" src = "../ui/images/ie-icon.png" > < h2 > Internet Explorer Configuration< / h2 >
2011-01-20 15:39:59 -05:00
< p > Once you are able to log into the workstation with your kerberos key you are now able to use that ticket in Internet Explorer. < / p >
2011-10-06 14:30:26 +02:00
2011-01-20 15:39:59 -05:00
< strong > Login to the Windows machine using an account of your Kerberos realm (administrative domain)< / strong > < br >
2011-10-06 14:30:26 +02:00
< strong > In Internet Explorer, click Tools, and then click Internet Options.< / strong >
2011-01-20 15:39:59 -05:00
< br >
< ul >
< li > 1. Click the Security tab < / li >
< li > 2. Click Local intranet < / li >
< li > 3. Click Sites < / li >
< li > 4. Click Advanced < / li >
< li > 5. Add your domain to the list < / li >
< br >
< li > 1. Click the Security tab < / li >
< li > 2. Click Local intranet < / li >
< li > 3. Click Custom Level < / li >
< li > 4. Select Automatic logon only in Intranet zone < / li >
< br >
< li > Visit a kerberized web site using IE (You must use the fully-qualified Domain Name in the URL)< / li >
< li > < strong > You are all set. < / strong > < / li >
< / ul >
2011-10-06 14:30:26 +02:00
2011-01-20 15:39:59 -05:00
< br >
2011-10-06 14:30:26 +02:00
2011-10-26 16:06:17 -05:00
< img alt = "Firefox" src = "../ui/images/firefox-icon.png" > < h2 > Firefox Configuration< / h2 >
2011-10-06 14:30:26 +02:00
2011-01-20 15:39:59 -05:00
< p > You can configure Firefox to use Kerberos for Single Sign-on. The following instructions will guide you in configuring your web browser < br >
to send your Kerberos credentials to the appropriate Key Distribution Center which enables Single Sign-on. < / p >
2011-10-06 14:30:26 +02:00
< ul > < li > 1. In the address bar of Firefox, type < tt > about:config< / tt > to display the list of current configuration options.< / li >
2011-01-20 15:39:59 -05:00
< li > 2. In the Filter field, type < tt > negotiate< / tt > to restrict the list of options. < / li >
< li > 3. Double-click the < tt > network.negotiate-auth.trusted-uris< / tt > entry to display the Enter string value dialog box. < / li >
2012-10-01 17:36:42 +02:00
< li > 4. Enter the name of the domain against which you want to authenticate, for example, < tt class = "example-domain" > .example.com.< / tt > < / li >
2011-01-20 15:39:59 -05:00
< br >
< li > < strong > You are all set. < / strong > < / li >
< / ul >
2011-10-06 14:30:26 +02:00
2012-10-01 17:36:42 +02:00
< h3 > < a name = "oldfirefox" > < / a > Automatic Configuration of older versions< / h3 >
< p > You can configure older versions of Firefox (up to version 14) using signed code. Use < a href = "browserconfig.html" > Firefox configuration page< / a > for newer versions.< / p >
< ul >
< li > 1. Import < a href = "ca.crt" > CA certificate< / a > . Make sure you checked all three checkboxes.< / li >
< li > 2. Click on "Configure Browser" button below.< / li >
2013-05-29 13:06:11 +02:00
< li id = "configurefirefox" style = "display:none" > < / li >
2012-10-01 17:36:42 +02:00
< / ul >
2011-01-20 15:39:59 -05:00
< / div >
2011-10-06 14:30:26 +02:00
2011-01-20 15:39:59 -05:00
< / div >
2007-09-24 15:20:34 -04:00
< / body >
2011-01-20 15:39:59 -05:00
2007-09-24 15:20:34 -04:00
< / html >
2011-01-20 15:39:59 -05:00
