[Freeipa-devel] solved + next problem :-(
Byambaa Mendbayar
mendbayar_b at mongol.net
Wed Jul 9 06:22:24 UTC 2008
Dear Rob,
Thank you very much for you response and kind help.
I have solved my problem it was I haven't use firefox from a console
which is defined KRB5_CONFIG=/etc/krb5_ipa.conf variable. It means I
have successes when I use /usr/sbin/firefox command from KRB5_CONFIG
variable defined console.
Thank you again Rob!
Now I trying to configure my LAN's clients to joining our freeIPA
server.
With kind regards,
Byambaa Mendbayar
On Mon, 2008-07-07 at 09:57 -0400, Rob Crittenden wrote:
> Byambaa Mendbayar wrote:
> > Dear devs,
> >
> > I have solve my previous problem. It was blocked by firewall on my
> > freeIPA server. After that i have getting still another error on my
> > client's Firefox browser. It is a following on my browser:
> >
> > --------------------------------------------------------
> > Kerberos Authentication Failed
> > Unable to verify your Kerberos credentials. Please make sure that you
> > have valid Kerberos tickets (obtainable via kinit), and that you have
> > configured your browser correctly. If you are still unable to access the
> > IPA Web interface, please contact the helpdesk on for additional
> > assistance.
> >
> > Import the IPA Certificate Authority.
> >
> > You can automatically configure your browser to work with Kerberos by
> > importing the Certificate Authority above and clicking on the Configure
> > Browser button.
> >
> > You must reload this page after importing the Certificate Authority for
> > the automatic settings to work
> >
> > --------------------------------------------------------
> >
> > I have checked everything again, again on my client computer it was all
> > things OK (same stated in guideline). My client computer's OS is
> > openSUSE 11.0 (I have installed krb5-client for kinit)
> >
> > What's wrong on my work? Please help and advice to me.
> >
> > Thanks and best regards,
> > Byambaa Mendbayar
>
> Did you get a kerberos ticket yet?
>
> If you had firefox running prior to obtaining a ticket you probably need
> to restart firefox.
>
> This page outlines how to debug the browser so you can better see what
> is going on.
>
> http://people.redhat.com/mikeb/negotiate/
>
> rob
>
More information about the Freeipa-devel
mailing list