freeipa/install/html/unauthorized.html

<html>
<title>Kerberos Authentication Failed</h2>
<body>
<h2>Kerberos Authentication Failed</h2>
<p>
Unable to verify your Kerberos credentials. Please make sure
that you have valid Kerberos tickets (obtainable via kinit), and that you
have <a href="/ipa/errors/ssbrowser.html">configured your
browser correctly</a>. If you are still unable to access
the IPA Web interface, please contact the helpdesk on for additional assistance.
</p>
<p>
Import the <a href="/ipa/errors/ca.crt">IPA Certificate Authority</a>.
</p>
<p>
<script type="text/javascript">
  if (navigator.userAgent.indexOf("Firefox") != -1 ||
      navigator.userAgent.indexOf("SeaMonkey") != -1)
  {
    document.write("<p>You can automatically configure your browser to work with Kerberos by importing the Certificate Authority above and clicking on the Configure Browser button.</p>");
    document.write("<p>You <strong>must</strong> reload this page after importing the Certificate Authority for the automatic settings to work</p>");
    document.write("<object data=\"jar:/ipa/errors/configure.jar!/preferences.html\" type=\"text/html\"><\/object");
  }
</script>
</p>
</ul>
</body>
</html>
Show (hopefully) useful information if the Kerberos connection fails. 2007-09-24 14:20:34 -05:00			`<html>`
			`<title>Kerberos Authentication Failed</h2>`
			`<body>`
			`<h2>Kerberos Authentication Failed</h2>`
			`<p>`
			`Unable to verify your Kerberos credentials. Please make sure`
			`that you have valid Kerberos tickets (obtainable via kinit), and that you`
Refine our web space some more so that everything we reference is in /ipa UI: /ipa/ui XML-RPC: /ipa/xml errors: /ipa/errors config: /ipa/config I had to hardcode that URI into the CSS pages but TurboGears handles the rest of the translations with tg.url(). Added a version to ipa.conf and ipa-rewrite.conf so we can update them in the future if needed with ipa-upgradeconfig 440443 2008-05-07 08:33:00 -05:00			`have <a href="/ipa/errors/ssbrowser.html">configured your`
Show (hopefully) useful information if the Kerberos connection fails. 2007-09-24 14:20:34 -05:00			`browser correctly</a>. If you are still unable to access`
Remove reference to a bogus system and make the error message more generic 2007-11-14 13:11:29 -06:00			`the IPA Web interface, please contact the helpdesk on for additional assistance.`
Show (hopefully) useful information if the Kerberos connection fails. 2007-09-24 14:20:34 -05:00			`</p>`
Add automatic browser configuration for kerberos SSO using javascript. This uses the UniversalPreferencesWrite function to set the browser preferences to allow negotiation and ticket forwarding in the IPA domain. A self-signed certificate is generated to sign the javascript. 2007-12-12 08:36:32 -06:00			`<p>`
Refine our web space some more so that everything we reference is in /ipa UI: /ipa/ui XML-RPC: /ipa/xml errors: /ipa/errors config: /ipa/config I had to hardcode that URI into the CSS pages but TurboGears handles the rest of the translations with tg.url(). Added a version to ipa.conf and ipa-rewrite.conf so we can update them in the future if needed with ipa-upgradeconfig 440443 2008-05-07 08:33:00 -05:00			`Import the <a href="/ipa/errors/ca.crt">IPA Certificate Authority</a>.`
Add automatic browser configuration for kerberos SSO using javascript. This uses the UniversalPreferencesWrite function to set the browser preferences to allow negotiation and ticket forwarding in the IPA domain. A self-signed certificate is generated to sign the javascript. 2007-12-12 08:36:32 -06:00			`</p>`
			`<p>`
			`<script type="text/javascript">`
			`if (navigator.userAgent.indexOf("Firefox") != -1 \|\|`
			`navigator.userAgent.indexOf("SeaMonkey") != -1)`
			`{`
Switch 'below' to 'above' to point to the right location of the CA on the page 2008-02-07 10:32:30 -06:00			`document.write("<p>You can automatically configure your browser to work with Kerberos by importing the Certificate Authority above and clicking on the Configure Browser button.</p>");`
Add automatic browser configuration for kerberos SSO using javascript. This uses the UniversalPreferencesWrite function to set the browser preferences to allow negotiation and ticket forwarding in the IPA domain. A self-signed certificate is generated to sign the javascript. 2007-12-12 08:36:32 -06:00			`document.write("<p>You <strong>must</strong> reload this page after importing the Certificate Authority for the automatic settings to work</p>");`
Refine our web space some more so that everything we reference is in /ipa UI: /ipa/ui XML-RPC: /ipa/xml errors: /ipa/errors config: /ipa/config I had to hardcode that URI into the CSS pages but TurboGears handles the rest of the translations with tg.url(). Added a version to ipa.conf and ipa-rewrite.conf so we can update them in the future if needed with ipa-upgradeconfig 440443 2008-05-07 08:33:00 -05:00			`document.write("<object data=\"jar:/ipa/errors/configure.jar!/preferences.html\" type=\"text/html\"><\/object");`
Add automatic browser configuration for kerberos SSO using javascript. This uses the UniversalPreferencesWrite function to set the browser preferences to allow negotiation and ticket forwarding in the IPA domain. A self-signed certificate is generated to sign the javascript. 2007-12-12 08:36:32 -06:00			`}`
			`</script>`
			`</p>`
Show (hopefully) useful information if the Kerberos connection fails. 2007-09-24 14:20:34 -05:00			`</ul>`
			`</body>`
			`</html>`