Using kerberos ticket on web browsers

[Diego Lima]

I am curretly setting up a SSO environment using a Debian server as PDC
(Samba+OpenLdap+Kerberos) and windows workstations (mostly windows XP).
Everything is working fine so far except I can't use the kerberos ticket I get
at logon on any windows internet browser.

Curretly the ticket is cached both at krb5cc_username api and a file at the
hard disk. I know both IE and Firefox support kerberos authentication to
websites (server is an apache2 with kerberos authentication that is already
working fine with linux clients), but they don't seem to understand that the
ticket isn't on windows LSA API.

Is there any way to set up either IE or Firefox and tell them where the ticket
they should use is located? Or is there any way to place the kerberos ticket
on windows LSA API?

Thank you,

--
Diego Alencar Alves de Lima
DINF - Prodesan (http://www.prodesan.com.br)
Prefeitura Municipal de Santos (http://www.santos.sp.gov.br)


-- 
Esta mensagem foi verificada pelo sistema de antivírus e
 acredita-se estar livre de perigo.