mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-26 17:01:14 -06:00
1829fa2c15
https://fedorahosted.org/freeipa/ticket/4278 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
129 lines
4.7 KiB
HTML
129 lines
4.7 KiB
HTML
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<title>IPA: Identity Policy Audit</title>
|
|
<script type="text/javascript" src="../ui/js/libs/loader.js"></script>
|
|
<script type="text/javascript">
|
|
(function() {
|
|
function loaded() {
|
|
$(document).ready(function() {
|
|
var domain = '.' + (IPA_DOMAIN || 'example.com');
|
|
$('.example-domain').text(domain);
|
|
|
|
var browser = IPA.browser_config.get_browser();
|
|
if (browser.mozilla) {
|
|
var ff_config = $("#configurefirefox");
|
|
var obj = $('<object/>', {
|
|
type: 'text/html',
|
|
'class': 'browser-config'
|
|
});
|
|
obj.prop('data', 'jar:/ipa/errors/configure.jar!/preferences.html');
|
|
obj.appendTo(ff_config);
|
|
ff_config.show();
|
|
}
|
|
});
|
|
}
|
|
|
|
var styles = [
|
|
'../ui/css/patternfly.css',
|
|
'../ui/css/ipa.css'
|
|
];
|
|
var scripts = [
|
|
'../ui/js/libs/jquery.js',
|
|
'krb.js',
|
|
'ffconfig.js'
|
|
];
|
|
ipa_loader.scripts(scripts, loaded);
|
|
ipa_loader.styles(styles);
|
|
})();
|
|
</script>
|
|
|
|
</head>
|
|
|
|
<body class="info-page">
|
|
|
|
<nav class="navbar navbar-default navbar-pf" role="navigation">
|
|
<div class="navbar-header">
|
|
<a class="brand" href="../ui/index.html"><img src="../ui/images/header-logo.png" alt="FreeIPA"></a>
|
|
</div>
|
|
</nav>
|
|
|
|
<div class="container-fluid">
|
|
<div class="row">
|
|
<div class="col-sm-12">
|
|
<div class="ssbrowser">
|
|
<h1>Browser Kerberos Setup</h1>
|
|
<h2><img alt="Internet Explorer" src="../ui/images/ie-icon.png">Internet Explorer Configuration</h2>
|
|
<p>
|
|
Once you are able to log into the workstation with your kerberos key you are now able to use that ticket in Internet Explorer.
|
|
</p>
|
|
<p>
|
|
<strong>Login to the Windows machine using an account of your Kerberos realm (administrative domain)</strong>
|
|
</p>
|
|
<p>
|
|
<strong>In Internet Explorer, click Tools, and then click Internet Options.</strong>
|
|
</p>
|
|
<div>
|
|
<ol>
|
|
<li>Click the Security tab</li>
|
|
<li>Click Local intranet</li>
|
|
<li>Click Sites </li>
|
|
<li>Click Advanced </li>
|
|
<li>Add your domain to the list</li>
|
|
</ol>
|
|
<ol>
|
|
<li>Click the Security tab</li>
|
|
<li>Click Local intranet</li>
|
|
<li>Click Custom Level</li>
|
|
<li>Select Automatic logon only in Intranet zone</li>
|
|
</ol>
|
|
|
|
<ol>
|
|
<li> Visit a kerberized web site using IE (You must use the fully-qualified Domain Name in the URL)</li>
|
|
<li><strong> You are all set.</strong></li>
|
|
</ol>
|
|
</div>
|
|
|
|
<h2><img alt="Firefox" src="../ui/images/firefox-icon.png">Firefox Configuration</h2>
|
|
|
|
<p>
|
|
You can configure Firefox to use Kerberos for Single Sign-on. The following instructions will guide you in configuring your web browser to send your Kerberos credentials to the appropriate Key Distribution Center which enables Single Sign-on.
|
|
</p>
|
|
|
|
<ol>
|
|
<li>
|
|
In the address bar of Firefox, type <code>about:config</code> to display the list of current configuration options.
|
|
</li>
|
|
<li>
|
|
In the Filter field, type <code>negotiate</code> to restrict the list of options.
|
|
</li>
|
|
<li>
|
|
Double-click the <code>network.negotiate-auth.trusted-uris</code> entry to display the Enter string value dialog box.
|
|
</li>
|
|
<li>
|
|
Enter the name of the domain against which you want to authenticate, for example, <code class="example-domain">.example.com.</code>
|
|
</li>
|
|
<li><strong> You are all set. </strong></li>
|
|
</ol>
|
|
|
|
<h3>Automatic Configuration of older versions</h3>
|
|
<p>You can configure older versions of Firefox (up to version 14) using signed code. Use <a href="browserconfig.html">Firefox configuration page</a> for newer versions.</p>
|
|
<ol>
|
|
<li>Import <a href="ca.crt">CA certificate</a>. Make sure you checked all three checkboxes.</li>
|
|
<li>
|
|
Click on "Configure Browser" button below.
|
|
<div id="configurefirefox" style="display:none"></div>
|
|
</li>
|
|
</ol>
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
</body>
|
|
|
|
</html>
|
|
|