On Tue, 2018-10-23 at 22:43 +0200, chiasa.men wrote: > You are right. I already configured it and it works. > My question is how to tell firefox to use the TGT gained via the vpn > connection for the further authentification processes. > > At the moment I'm using MIT Kerberos Client and gain a Ticket > manually (again) > Firefox is set to use the Kerberos Client's gsslib and probably > that's why > firefox knows about the ticket. > > So the question is, how to skip the Kerberos Client since the ticket > should be > already there. > > I hope that makes it a bit more understandable. Thanks. I do not know how could this be done in windows, but in linux you can use kswitch to make a particular principal's credentials the primary ones (and the ones used by default by most apps). regards, Nikos