[Freeipa-users] getting a kerberos ticket for Firefox

[Rob Crittenden]

Steven Jones wrote:
> Hi,
>
> I am trying to web browse to the localhost and it is telling me to obtain a valid kerberos ticket and configure Firefox...
>
> Where do I export / find this ticket? and how do I install it as a user so I can connect?

To configure Firefox see these instructions:

http://freeipa.org/docs/1.2/Installation_Deployment_Guide/en-US/html/sect-Installation_and_Deployment_Guide-Setting_up_the_IPA_Server-Configuring_Your_Browser.html

On the machine (and user) you are running Firefox from run: kinit admin

Then you should be able connect to https://ipa.example.com/

You really should use the FQDN of the IPA host. We do a fair bit of 
redirecting so it may do the right thing but kerberos is very picky 
about host names. If they don't match up as it expected then things 
won't work.

Even with an unconfigured browser going to https://ipa.example.com/ 
should provide some instructions for configuring Firefox and provide a 
button that can auto-configure the browser. You just need to trust our 
CA first. Javascript is very picky (and for good reason) about letting a 
web site change your browser configuration.

rob

>
> regards
>
> Steven Jones Technical Specialist Linux/Vmware
> Tele 64 4 463 6272
> Victoria University
> Kelburn
> New Zealand
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users