Description of problem: To be able to use FF with kerberos SSO one has to follow the instructions like this: Firefox can use your Kerberos credentials for authentication, but you need to specify which domains to communicate with, and using which attributes. 1. Open Firefox, and type "about:config" in the Address Bar. 2. In the Search field, type "negotiate". 3. Ensure the following lines reflect your setup. Replace ".example.com" with your own kerberos domain, including the preceding period (.): network.negotiate-auth.trusted-uris .example.com network.negotiate-auth.delegation-uris .example.com network.negotiate-auth.using-native-gsslib true 4. If you are configuring Firefox on Microsoft Windows, make the following changes instead: network.negotiate-auth.trusted-uris .example.com network.auth.use-sspi false network.negotiate-auth.delegation-uris .example.com 5. In Firefox, navigate to the kerberos protected web site and ensure that there are no Kerberos authentication errors, and that you can see and interact with the web site. This bug is a request to provide a much more user friendly way of accomplishing the same goal using some kind of click through interface. It should also be possible to configure it using system management tools and scripts. Version-Release number of selected component (if applicable): Any How reproducible: Always Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Completely agree, we filed this bug in the upstream database (https://bugzilla.mozilla.org/show_bug.cgi?id=520668) because we believe that it is more appropriate to let it be resolved upstream. We will continue to track the issue in the centralized upstream bug tracker, and will review any bug fixes that become available for consideration in future updates. Thank you for the bug report.