搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

Kerberos keytab location

  • 2 回覆
  • 0 有這個問題
  • 8 次檢視
  • 最近回覆由 gerdesj

more options

How does Firefox determine where the Kerberos keytab is located?

The default location for Kerberos keytabs on a Linux box is within /tmp. /tmp is very temporary these days and is wiped on reboot and it looks like on the various power save/restore.

So, I decided to move the keytabs to a static location to allow them to work according to the usual schedules and timeouts, instead of being wiped out on a whim. I settled on /var/lib/krb5tabs/krb5cc_%u I configured that within /etc/krb5.conf

I use pam_winbind from Samba to do the Kerberos login and the keytab is filled in and the environment var KRB5CCNAME is set correctly.

Before the change of the location of the keytab from the defaults, everything works fine apart from after a resume and creds need re entering (which is the pain I am trying to avoid).

After the change, Evolution is still able to authenticate via Kerberos but Firefox is not. So, does FF just assume defaults or actually follow KRB5CCNAME - which seems to be the standard for Kerberos?

How does Firefox determine where the Kerberos keytab is located? The default location for Kerberos keytabs on a Linux box is within /tmp. /tmp is '''''very''''' temporary these days and is wiped on reboot and it looks like on the various power save/restore. So, I decided to move the keytabs to a static location to allow them to work according to the usual schedules and timeouts, instead of being wiped out on a whim. I settled on '''''/var/lib/krb5tabs/krb5cc_%u''''' I configured that within '''''/etc/krb5.conf''''' I use pam_winbind from Samba to do the Kerberos login and the keytab is filled in and the environment var KRB5CCNAME is set correctly. Before the change of the location of the keytab from the defaults, everything works fine apart from after a resume and creds need re entering (which is the pain I am trying to avoid). After the change, Evolution is still able to authenticate via Kerberos but Firefox is not. So, does FF just assume defaults or actually follow KRB5CCNAME - which seems to be the standard for Kerberos?

所有回覆 (2)

more options

How is the related to Firefox browser? I think this is more related to the OS that controls the keyboard layout otherwise this is the standard Firefox hotkeys setup. This seems more like a keyboard layout feature.

https://support.mozilla.org/en-US/kb/keyboard-shortcuts-perform-firefox-tasks-quickly

Anything different would be up to the 3rd party software to define and support keyboard changes or configurations.

有幫助嗎?

more options

Thank you for your response. Keyboard layouts are unrelated to Kerberos.

有幫助嗎?

問個問題

如果您還沒有帳號,您必須先登入帳號 來回覆文章。還沒有帳號的話,只能發問新問題