Cockpit SSO with kerberos not working

Fujisan fujisan43 at
Thu Oct 22 10:11:57 UTC 2015

The step described here (
are exactly the steps I do to configure FreeIPA to SSO with kerberos.

If I create a kerberos ticket with "kinit admin", when I go to
http://ipasrv/ipa/ui with firefox from my desktop (ipa client), I am logged
in without username/password.

But when I go to http://ipasrv:9090 with firefox (cockpit is installed on
the ipa server), cockpit asks me for a username and password.
And I log in as root.

On the ipa server, I can run

$ getent passwd smith at
smith:*:1002:1025:John Smith:/home/smith:/bin/bash

$ host -t SRV has SRV record 0 100 88

On my desktop, firefox is configured like this:

network.negotiate-auth.trusted-uris    user set     string

So I must be missing something.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the cockpit-devel mailing list