You are right. I already configured it and it works. My question is how to tell firefox to use the TGT gained via the vpn connection for the further authentification processes. At the moment I'm using MIT Kerberos Client and gain a Ticket manually (again) Firefox is set to use the Kerberos Client's gsslib and probably that's why firefox knows about the ticket. So the question is, how to skip the Kerberos Client since the ticket should be already there. I hope that makes it a bit more understandable. Am Dienstag, 23. Oktober 2018, 20:22:27 CEST schrieb Nikos Mavrogiannopoulos: > Firefox has kerberos (spnego) authentication disabled by default. You need > to enable it, per domain. > > See: > https://www.adelton.com/docs/idm/enable-kerberos-in-firefox > > On October 20, 2018 12:19:32 PM UTC, "chiasa.men" <chiasa.men at web.de> wrote: > >I'm running ocserv on a linux with kerberos auth which works well. > >My client is a windows client which is running firefox. > > > >How can i make it authenticate with the credentials used for > >openconnect > >instead of the windows user creds? > >The idea is to authenticate automatically into webservices after logged > >into > >vpn > >At the moment i'm running apache with mod-auth-kerb5 > >It's logs say: gss_accept_sec_context() failed: An unsupported > >mechanism was > >requested (, Unknown error), > > > >Is there maybe an alternative approach for reaching the goal? > >It seems to be a pretty common demand - how is it met usually? > > > > > > > > > >_______________________________________________ > >openconnect-devel mailing list > >openconnect-devel at lists.infradead.org > >http://lists.infradead.org/mailman/listinfo/openconnect-devel
