Cockpit SSO with kerberos not working
Fujisan
fujisan43 at gmail.com
Thu Oct 22 10:11:57 UTC 2015
The step described here (http://cockpit-project.org/guide/latest/sso.html)
are exactly the steps I do to configure FreeIPA to SSO with kerberos.
If I create a kerberos ticket with "kinit admin", when I go to
http://ipasrv/ipa/ui with firefox from my desktop (ipa client), I am logged
in without username/password.
But when I go to http://ipasrv:9090 with firefox (cockpit is installed on
the ipa server), cockpit asks me for a username and password.
And I log in as root.
On the ipa server, I can run
$ getent passwd smith at example.com
smith:*:1002:1025:John Smith:/home/smith:/bin/bash
$ host -t SRV _kerberos._udp.example.com
_kerberos._udp.example.com has SRV record 0 100 88 zaira.example.com.
On my desktop, firefox is configured like this:
network.negotiate-auth.trusted-uris user set string .example.com
So I must be missing something.
Regards,
Fuji
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/cockpit-devel/attachments/20151022/9b6a3e64/attachment-0001.html>
More information about the cockpit-devel
mailing list