[Freeipa-devel] [PATCH] automatic browser config

Karl MacMillan kmacmill at redhat.com
Wed Dec 12 16:34:21 UTC 2007


On Wed, 2007-12-12 at 09:37 -0500, Rob Crittenden wrote:
> Add automatic browser configuration for kerberos SSO using javascript.
> 
> This uses the UniversalPreferencesWrite function to set the browser 
> preferences to allow negotiation and ticket forwarding in the IPA domain.
> 
> A self-signed certificate is generated to sign the javascript.
> 
> This will only display and work on modern gecko-based browsers.
> 

This worked for me (once a minor typo was fixed) - pushed. A few
questions:

1) How will this work when a user provides their own certs? Is there an
easy way for them to re-sign the jar or do we need to provide a tool to
help them do that?

2) Can we force a reload after configuration - currently it says success
but nothing happens.

Karl




More information about the Freeipa-devel mailing list