>> I have tried to implement single-sign-on on a my macbook.
>> - has anybody manage to configure supported browsers for Kerberos sso
>> and apache on macOS clients?
> Yes, if you're using Firefox you should read
> https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication > and set the preferences mentioned on that page to whitelist the URLs
> you want to use HTTP Negotiate auth with. Firefox will not try Negotiate by
Yes, it works.
I had already tried that. It seems to me that my problem was the enctype
of my ticket granting ticket principal key was DES.
I upgraded it from DES to AES256 on my kerberos master (yes, I know:
something I had to do anyway).