Configure web browsers to support Kerberos 

---

Configure your web browser to support Kerberos authentication. 

About this task

Add IBM Connections and IBM HTTP Server to the list of sites that are permitted to engage in SPNEGO authentication with the browser.
 To edit your web browser preferences...

Do one of the following:

• Microsoft™ Internet Explorer:

  1. From the Internet Explorer menu, select Tools -> Internet Options and then click the Security tab.

  2. Click the Local intranet icon and then click Sites.

  3. Click Advanced and then add the web address of the host name of your IBM Connections server into the Add this website to the zone field. For example: *.enterprise.example.com. Click Add.

  4. Enter the host name of your IBM HTTP Server into the Add this website to the zone field and click Add. For example: http://<IHS_host> or https://<IHS_host>".

  5. Click OK to save the change and return to the main Security page.

  6. Click Custom level, scroll to find User Authentication -> Logon, and select Automatic logon only in Intranet zone. Click OK to save the change and return to the main Security page.

  7. Click the Advanced tab, scroll to find Security, and then select the Enable Integrated Windows Authentication check box. Click OK to save the change.

  8. Restart the web browser to apply the configuration changes.
     

• Mozilla Firefox:
  

  1. Open Firefox, and type about:config into the location bar.

  2. Type network.n into the Filter field and double-click network.negotiate-auth.trusted-uris.

  3. Enter the address of the server that hosts IBM Connections. For example: http://enterprise.example.com or https://enterprise.example.com if you want to use HTTPS. Enter a comma and then enter the address of the IIS server.

  4. Click OK to save the change.

  5. If the deployed SPNEGO solution is using the advanced Kerberos application of Credential Delegation, double-click network.negotiate-auth.delegation-uris. This preference defines the sites for which the browser can delegate user authorization to the server. Enter a comma-delimited list of trusted domains or URLs.

  6. Restart Firefox to apply the configuration change.
     

Parent topic

Enable single sign-on for the Windows desktop
Previous topic: Configure SPNEGO on IBM HTTP Server

Related tasks

Enable single sign-on for Tivoli Access Manager with SPNEGO

+

Search Tips   |   Advanced Search