Kerberos for authentication, php for authorization

[Christopher D. Clausen]

slushpupie at gmail.com wrote:
> On Windows the two browsers can only acquire credentials
> from the LSA which means the workstation needs to be joined to a
> domain, I believe.

That isn't true.  You can configure FireFox on Windows to use 
credentials from Kerberos for Windows ccaches instead of using 
Microsoft's Kerberos.   Just set 
network.negotiate-auth.using-native-gsslib to false in about:config

<<CDC