SPNEGO settings for FireFox and GoogleChrome

Question

Im trying to configure GoogleChrome and FireFox to work via SPNEGO/Kerberos with IBM WebSphere Portal 6.1 on WAS7, when the client is in a domain other than the one in which need to log in. In IE this can be done by setting "promt for user name and password", but i cant find any analogue of this setting in FF and GC.

My current FF & GC settings:

FF:

• network.negotiate-auth.delegation-uris = domain
• network.negotiate-auth.trusted-uris = domain

GC:

--auth-server-whitelist="*domain"

It works only if client is in the same domain in wich to log in.

Answer 1

This is intended behavior for SPNEGO/Kerberos/GSS-API. In works with domain accounts only.