Following the Using_a_Browser_on_Another_System's instructions to connect to the ipa server with Firefox 3 Beta 5 (installed on Fedora 9), I keep getting "Kerberos Authentication Failed", etc... even though kinit admin succeeded. I just tried the same url with the text browser elinks and it goes through! Are there any changes needed for Firefox 3 than those listed on the documentation?
Look in about:config and search for 'negot'. It should look something like this, but with better formatting: network.negotiate-auth.allow-proxies true network.negotiate-auth.delegation-uris example.com network.negotiate-auth.gsslib <empty> network.negotiate-auth.trusted-uris example.com network.negotiate-auth.using-native-gsslib true There is some good documentation, with screenshots, on how to setup negotiation in general at http://people.redhat.com/mikeb/negotiate/ At the bottom is information on how to have the browser generate a log of what it is doing that can be helpful. Alternatively you can try the autoconfigure button that should be on the Kerberos Authentication failed page. You need to first import and trust the CA (select all 3 checkboxes) and restart the browser. Then click the button and accept that it will change your browser prefs and you should be ok.
That is what I had done, trying both methods. I'm currently working on something else, I'll give it a second try and keep you updated.
I finally got Firefox 3 Beta 5 working. By default it is much more sensitive to SSL certificates checking, I guess that's why I couldn't get in until I got a certificate from a known authority.
Glad you got things working. Closing bug.