AnsweredAssumed Answered

explorer wonks out when using kerberos SSO in FF and safari

Question asked by ofrxnz on Aug 5, 2009
Latest reply on Nov 10, 2009 by xkahn
So, in alfresco 3.2 i have configured kerberos to work for both cifs and http.  everything works fine.

when i turn on kerberos sso, IE authentication works great….

however, when SSO is enabled the most current version of firefox will seem to authenticate and, redirect from http://<server>/alfresco to http://<server>/alfresco/faces/jsp/dashboards/container.jsp and then just hang on a white screen with no content.   it is not trying to load. 

when i perform the same test on safari(win) i am prompted for a username and password when i enter this, it redirects as above then safari crashes

here is the Kerberos debug from the safari and FF tests…I believe the "client sent…" was for the safari tests

14:05:03,399 DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] New Kerberos auth request from 192.168.254.125 (192.168.254.125:3074)
14:05:07,258 DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] New Kerberos auth request from 192.168.254.125 (192.168.254.125:3074)
14:05:21,837 DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] New Kerberos auth request from 192.168.254.125 (192.168.254.125:3074)
14:05:56,850 DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] New Kerberos auth request from 192.168.254.125 (192.168.254.125:3140)
14:06:09,044 DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] Client sent an NTLMSSP security blob
14:06:32,783 DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] New Kerberos auth request from 192.168.254.125 (192.168.254.125:3186)
14:06:54,182 DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] Client sent an NTLMSSP security blob
14:11:14,365 DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] New Kerberos auth request from 192.168.254.125 (192.168.254.125:3527)
14:11:20,391 DEBUG [org.alfresco.web.app.servlet.KerberosAuthenticationFilter] New Kerberos auth request from 192.168.254.125 (192.168.254.125:3529)

any ideas on the cause of this or how to fix it?

Outcomes