| Both sides previous revisionPrevious revisionNext revision | Previous revisionLast revisionBoth sides next revision |
| 72:configure_browser [2018/07/06 18:54] – [Configuring the Browser] bkkr | 72:configure_browser [2018/07/06 19:20] – [Configuring the Browser] bkkr |
|---|
| |
| //To use the autologin feature, a browser has to be configured to use SPNego authentication for trusted Intranet sites. Furthermore proxy usage for Intranet sites should be disabled.// | //To use the autologin feature, a browser has to be configured to use SPNego authentication for trusted Intranet sites. Furthermore proxy usage for Intranet sites should be disabled.// |
| |
| === Firefox === | === Firefox === |
| |
| * Open the Firefox configuration page by typing “about:config” into the URLaddress bar. You can filter the configuration options by typing “nego” into the search bar. | Open the Firefox configuration page by typing ''about:config'' into the URLaddress bar. You can filter the configuration options by typing “nego” into the search bar. Next, change '' network.negotiate-auth.delegation-uris '' and ''network.negotiateauth.trusted-uris'' to the DNS domain name of the Stages server. You are free to use a smaller sub-part like in our example. The original domain name is ''pkitbuild.er.methodpark.de'' , but we used '' methodpark.de '' to enable SPNego for the whole company. Then, change the search filter to “proxy” and add an expression like '' *.methodpark.de '' to the property ''network.proxy.no_proxies_on'' . |
| * Change ''<font inherit/Courier New,Courier,monospace;;inherit;;inherit>network.negotiate-auth.delegation-uris</font>'' and <font inherit/Courier New,Courier,monospace;;inherit;;inherit>''network.negotiateauth.trusted-uris''</font> to the DNS domain name of the Stages server. You are free to use a smaller sub-part like in our example. The original domain name is <font inherit/Courier New,Courier,monospace;;inherit;;inherit>''pkitbuild.er.methodpark.de''</font>, but we used ''<font inherit/Courier New,Courier,monospace;;inherit;;inherit>methodpark.de</font>'' to enable SPNego for the whole company. | === Microsoft Internet Explorer === |
| * Change the search filter to “proxy” and add an expression like ''<font inherit/Courier New,Courier,monospace;;inherit;;inherit>*.methodpark.de</font>'' to the property <font inherit/Courier New,Courier,monospace;;inherit;;inherit>''network.proxy.no_proxies_on''</font>. | |
| |
| === === | First, open "Tools" then "Internet options". Select the "Security" tab, "Local Intranet", and then the "Sites" button. Next, click "Advanced". Add the DNS domain of your Stages server to the trusted URLs list. Enable SPNego support for the "Local Intranet" zone then go back to the "Security" tab and press "Custom Level". Next, scroll down to "User Application" and check "Automatic logon only in Intranet Zone". Go back to "Internet Options" dialog box and select the "Advanced" tab. Scroll down until "Secruity" and check "Enable Integrated Windows Authentication (requires restart)". Lastly, you have to change the Proxy settings to avoid proxy usage. Go to the advanced proxy settings and add an exception for the DNS domain name of the Stages server. |
| |
| |