<p dir="ltr">Not in chrome. If you don't want kerberos at all for the console you could try disabling it in Apache but that will break with every update to ipa</p>
<br><div class="gmail_quote"><div dir="ltr">On Fri, Dec 30, 2016, 11:49 AM Abhinay Reddy Peddireddy <<a href="mailto:apeddire@redhat.com">apeddire@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg">Hi, <br class="gmail_msg"><br class="gmail_msg"></div>Yes. It is fine with Firefox. But not with chrome. <br class="gmail_msg"><br class="gmail_msg"></div>However customer is expecting the same on Chrome also. <br class="gmail_msg"><br class="gmail_msg"></div>Ant modifications can be done to avoid the pop-up ? <br class="gmail_msg"></div><div class="gmail_extra gmail_msg"><br class="gmail_msg"><div class="gmail_quote gmail_msg">On Fri, Dec 30, 2016 at 10:05 PM, Marc Boorshtein <span dir="ltr" class="gmail_msg"><<a href="mailto:marc.boorshtein@tremolosecurity.com" class="gmail_msg" target="_blank">marc.boorshtein@tremolosecurity.com</a>></span> wrote:<br class="gmail_msg"><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="gmail_msg">it looks like you are using chrome? we have a customer with a similar issue. Chrome doesn't follow the specs around kerberos, if it receives a 401 it will generally prompt you even if you are not a member of a domain. My guess is if you try it with Firefox or IE you should be fine and not get the prompt.</div><br class="gmail_msg"><div class="gmail_quote gmail_msg"><div class="gmail_msg"><div class="m_-7065771756697410796h5 gmail_msg"><div dir="ltr" class="gmail_msg">On Fri, Dec 30, 2016 at 10:52 AM Abhinay Reddy Peddireddy <<a href="mailto:apeddire@redhat.com" class="gmail_msg" target="_blank">apeddire@redhat.com</a>> wrote:<br class="gmail_msg"></div></div></div><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_msg"><div class="m_-7065771756697410796h5 gmail_msg"><div dir="ltr" class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><div class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><div class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><div class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><div class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><div class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><div class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><div class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg">Hello Team, <br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"></div>I have a customer testing IPA on RHEL 7. <br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"></div>When he tries to access the WebUI, it prompts for the username and password as a pop-up as shown in the below attached image. <br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"></div>This happens with Google Chrome and Internet Explorer only. But it appears normal in Firefox. <br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"></div>Customer is expecting a normal authentication prompt. Is this something to be checked from IPA end. I hope this has to be corrected or modified from browser end. <br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"></div>Any suggestions ? <br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"></div>Thanks and Regards, <br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"></div>Abhinay Reddy. <br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg"></div></div></div><span class="m_-7065771756697410796HOEnZb gmail_msg"><font color="#888888" class="gmail_msg">
--<br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg">
Manage your subscription for the Freeipa-users mailing list:<br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg">
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg">
Go to <a href="http://freeipa.org" rel="noreferrer" class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg" target="_blank">http://freeipa.org</a> for more info on the project</font></span></blockquote></div><span class="m_-7065771756697410796HOEnZb gmail_msg"><font color="#888888" class="gmail_msg"><div dir="ltr" class="gmail_msg">-- <br class="gmail_msg"></div><div data-smartmail="gmail_signature" class="gmail_msg"><div dir="ltr" class="gmail_msg"><span style="color:rgb(117,117,117);font-family:sans-serif" class="gmail_msg">Marc Boorshtein</span><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg" style="color:rgb(117,117,117);font-family:sans-serif"><span style="color:rgb(117,117,117);font-family:sans-serif" class="gmail_msg">CTO Tremolo Security</span><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg" style="color:rgb(117,117,117);font-family:sans-serif"><a href="mailto:marc.boorshtein@tremolosecurity.com" class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg" style="font-family:sans-serif" target="_blank">marc.boorshtein@tremolosecurity.com</a><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg" style="color:rgb(117,117,117);font-family:sans-serif"><a href="tel:(703)%20828-4902" value="+17038284902" class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg" style="font-family:sans-serif" target="_blank">(703) 828-4902</a><br class="m_-7065771756697410796m_-7722859349010864205gmail_msg gmail_msg" style="color:rgb(117,117,117);font-family:sans-serif"><span style="color:rgb(117,117,117);font-family:sans-serif" class="gmail_msg">Twitter - @mlbiam / @tremolosecurity</span><br class="gmail_msg"></div></div>
</font></span></blockquote></div><br class="gmail_msg"></div>
</blockquote></div><div dir="ltr">-- <br></div><div data-smartmail="gmail_signature"><div dir="ltr"><span style="color:rgb(117,117,117);font-family:sans-serif">Marc Boorshtein</span><br class="gmail_msg" style="color:rgb(117,117,117);font-family:sans-serif"><span style="color:rgb(117,117,117);font-family:sans-serif">CTO Tremolo Security</span><br class="gmail_msg" style="color:rgb(117,117,117);font-family:sans-serif"><a href="mailto:marc.boorshtein@tremolosecurity.com" class="gmail_msg" target="_blank" style="font-family:sans-serif">marc.boorshtein@tremolosecurity.com</a><br class="gmail_msg" style="color:rgb(117,117,117);font-family:sans-serif"><a href="tel:(703)%20828-4902" value="+17038284902" class="gmail_msg" target="_blank" style="font-family:sans-serif">(703) 828-4902</a><br class="gmail_msg" style="color:rgb(117,117,117);font-family:sans-serif"><span style="color:rgb(117,117,117);font-family:sans-serif">Twitter - @mlbiam / @tremolosecurity</span><br></div></div>