2011-01-20 15:39:59 -05:00
<!DOCTYPE html>
2007-09-24 15:20:34 -04:00
< html >
2008-05-20 09:43:31 -04:00
< head >
2011-01-20 15:39:59 -05:00
< meta charset = "utf-8" >
< title > IPA: Identity Policy Audit< / title >
2007-09-24 15:20:34 -04:00
2011-10-06 14:30:26 +02:00
< link rel = "stylesheet" type = "text/css" href = "../ui/jquery-ui.css" / >
2011-10-11 09:42:35 +02:00
< link rel = "stylesheet" type = "text/css" href = "../ui/ipa.css" / >
2011-01-20 15:39:59 -05:00
< link rel = "stylesheet" type = "text/css" href = "ipa_error.css" / >
2012-10-01 17:36:42 +02:00
2012-11-09 17:13:28 +01:00
< script type = "text/javascript" src = "../ui/js/libs/jquery.js" > < / script >
2012-10-01 17:36:42 +02:00
< script type = "text/javascript" src = "krb.js" > < / script >
< script type = "text/javascript" >
$(document).ready(function() {
var domain = '.' + (IPA_DOMAIN || 'example.com');
$('.example-domain').text(domain);
if ($.browser.mozilla) {
$("#configurefirefox").show();
}
});
< / script >
2011-01-20 15:39:59 -05:00
< / head >
2007-09-24 15:20:34 -04:00
2011-10-11 09:42:35 +02:00
< body class = "info-page" >
2011-10-06 14:30:26 +02:00
2011-10-11 09:42:35 +02:00
< div class = "container_1 ssbrowser" >
2011-01-20 15:39:59 -05:00
< div class = "header-logo" >
2011-10-26 16:06:17 -05:00
< img src = "../ui/images/ipa-logo.png" / > < img src = "../ui/images/ipa-banner.png" / >
2011-10-06 14:30:26 +02:00
< / div >
< div class = "textblockkrb" >
2011-10-11 09:42:35 +02:00
< h1 > Browser Kerberos Setup< / h1 >
2011-10-26 16:06:17 -05:00
< img alt = "Internet Explorer" src = "../ui/images/ie-icon.png" > < h2 > Internet Explorer Configuration< / h2 >
2011-01-20 15:39:59 -05:00
< p > Once you are able to log into the workstation with your kerberos key you are now able to use that ticket in Internet Explorer. < / p >
2011-10-06 14:30:26 +02:00
2011-01-20 15:39:59 -05:00
< strong > Login to the Windows machine using an account of your Kerberos realm (administrative domain)< / strong > < br >
2011-10-06 14:30:26 +02:00
< strong > In Internet Explorer, click Tools, and then click Internet Options.< / strong >
2011-01-20 15:39:59 -05:00
< br >
< ul >
< li > 1. Click the Security tab < / li >
< li > 2. Click Local intranet < / li >
< li > 3. Click Sites < / li >
< li > 4. Click Advanced < / li >
< li > 5. Add your domain to the list < / li >
< br >
< li > 1. Click the Security tab < / li >
< li > 2. Click Local intranet < / li >
< li > 3. Click Custom Level < / li >
< li > 4. Select Automatic logon only in Intranet zone < / li >
< br >
< li > Visit a kerberized web site using IE (You must use the fully-qualified Domain Name in the URL)< / li >
< li > < strong > You are all set. < / strong > < / li >
< / ul >
2011-10-06 14:30:26 +02:00
2011-01-20 15:39:59 -05:00
< br >
2011-10-06 14:30:26 +02:00
2011-10-26 16:06:17 -05:00
< img alt = "Firefox" src = "../ui/images/firefox-icon.png" > < h2 > Firefox Configuration< / h2 >
2011-10-06 14:30:26 +02:00
2011-01-20 15:39:59 -05:00
< p > You can configure Firefox to use Kerberos for Single Sign-on. The following instructions will guide you in configuring your web browser < br >
to send your Kerberos credentials to the appropriate Key Distribution Center which enables Single Sign-on. < / p >
2011-10-06 14:30:26 +02:00
< ul > < li > 1. In the address bar of Firefox, type < tt > about:config< / tt > to display the list of current configuration options.< / li >
2011-01-20 15:39:59 -05:00
< li > 2. In the Filter field, type < tt > negotiate< / tt > to restrict the list of options. < / li >
< li > 3. Double-click the < tt > network.negotiate-auth.trusted-uris< / tt > entry to display the Enter string value dialog box. < / li >
2012-10-01 17:36:42 +02:00
< li > 4. Enter the name of the domain against which you want to authenticate, for example, < tt class = "example-domain" > .example.com.< / tt > < / li >
2011-01-20 15:39:59 -05:00
< br >
< li > < strong > You are all set. < / strong > < / li >
< / ul >
2011-10-06 14:30:26 +02:00
2012-10-01 17:36:42 +02:00
< h3 > < a name = "oldfirefox" > < / a > Automatic Configuration of older versions< / h3 >
< p > You can configure older versions of Firefox (up to version 14) using signed code. Use < a href = "browserconfig.html" > Firefox configuration page< / a > for newer versions.< / p >
< ul >
< li > 1. Import < a href = "ca.crt" > CA certificate< / a > . Make sure you checked all three checkboxes.< / li >
< li > 2. Click on "Configure Browser" button below.< / li >
< li id = "configurefirefox" style = "display:none" > < object data = "jar:/ipa/errors/configure.jar!/preferences.html"
type="text/html" class="browser-config">< / object > < / li >
< / ul >
2011-01-20 15:39:59 -05:00
< / div >
2011-10-06 14:30:26 +02:00
2011-01-20 15:39:59 -05:00
< / div >
2007-09-24 15:20:34 -04:00
< / body >
2011-01-20 15:39:59 -05:00
2007-09-24 15:20:34 -04:00
< / html >
2011-01-20 15:39:59 -05:00
