Browser Configuration for SPNEGO

Most modern browsers support SPNEGO but most require configuration.

Before the browser configuration will work, you will need to have a working client configuration.

Linux

Firefox

Tested with Firefox 1.5.0.9.

SPNEGO support for Firefox is turned off by default. To enable it, go to the about:config URL and change:

  • network.negotiate-auth.trusted-uris to include the web server's domain name (eg. "office.lan')
  • network.negotiate-auth.using-native-gsslib to false
  • network.negotiate-auth.gsslib to '/usr/lib/libgssapi_krb5.so.2' (on both FC5 and FC6)

Mac OS X

Safari

Tested with Safari 2.0.4 on Mac OS X 10.4.9 (Tiger).

Safari supports SPNEGO without modification.

Firefox

Tested with Firefox 2.0.0.1.

SPNEGO support for Firefox is turned off by default. To enable this, go to the about:config URL and change:

  • network.negotiate-auth.trusted-uris to include the web server's domain name (eg. "office.lan')
  • network.negotiate-auth.using-native-gsslib to true (it should already be set)

Windows XP

IE

Tested with IE 6 on Windows XP.

Microsoft has comprehensive instructions here.

Firefox

Tested with Firefox 1.5.

See instructions for Firefox Mac OS X.