On Mon, 2024-06-24 at 21:09 +0200, Leon Fauster via devel wrote: > Am 24.06.24 um 20:14 schrieb Tom Hughes via devel: > > On 24/06/2024 18:26, Stephen Gallagher wrote: > > > > > Not really an issue if you have GSSAPI set up on your system. Such as > > > by installing fedora-chromium-config-gssapi (for Chrome/Chromium > > > users) or by using Firefox which is set up for GSSAPI out-of-the-box. > > > > I've never seen Firefox use my kerberos ticket, it always asks me > > to login. That doesn't bother me though because I have my password > > manager readily available there, unlike at the command line. > > > Its long time ago that I used it. IIRC the website should be on the > site-list of the FF config. The key is > > network.negotiate-auth.trusted-uris > > maybe also > > network.negotiate-auth.delegation-uris NEVER set this, it causes your browser to give away your Kerberos TGT, something you DO NOT WANT to do, ever!. HTH, Simo. -- Simo Sorce Distinguished Engineer RHEL Crypto Team Red Hat, Inc -- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
