diff --git a/docs/source/HOWTO.rst b/docs/source/HOWTO.rst
index 02c91833..6d50bfae 100644
--- a/docs/source/HOWTO.rst
+++ b/docs/source/HOWTO.rst
@@ -61,14 +61,12 @@ The web site utilizes Kerberos authentication. In order to log in you
will need a valid Kerberos ticket and your web browser will need to be
configured to send the Kerberos information to the server.
-In Firefox or Mozilla, you will need to use the about:config page to set
-a few parameters. Use the search term 'negotiate' to filter the list.
+In Firefox, you will need to use the about:config page to set
+a Kerberos parameter. Use the search term 'negotiate' to filter the list.
Change network.negotiate-auth.trusted-uris to the domain you want to
authenticate against, e.g .example.com. You can leave
network.negotiate-auth.delegation-uris blank, as it enables Kerberos
-ticket passing, which is not required. If you do not see those two
-config options listed, your version of Firefox or Mozilla may be too old
-to support Negotiate authentication, and you should consider upgrading.
+ticket passing, which is not required.
In order to obtain a Kerberos ticket, use the kinit command.
diff --git a/www/docs/negotiate/index.html b/www/docs/negotiate/index.html
index ed6122e7..1b161a0a 100644
--- a/www/docs/negotiate/index.html
+++ b/www/docs/negotiate/index.html
@@ -1,11 +1,11 @@
- Configuring Firefox (and Mozilla) for Negotiate Authentication
+ Configuring Firefox for Negotiate Authentication
- Configuring Firefox (and Mozilla) for Negotiate Authentication
+ Configuring Firefox for Negotiate Authentication
- Before Firefox and Mozilla can authenticate to a server using "Negotiate"
+ Before Firefox can authenticate to a server using "Negotiate"
authentication, a couple of configuration changes must be made.
@@ -15,16 +15,7 @@
Change network.negotiate-auth.trusted-uris to the domain you want to authenticate against,
e.g. .example.com. You can leave network.negotiate-auth.delegation-uris
- blank, as it enables Kerberos ticket passing, which is not required. If you do not see those two config
- options listed, your version of Firefox or Mozilla may be too old to support Negotiate authentication, and
- you should consider upgrading.
-
- FC5 Update: Firefox and Mozilla on FC5 are attempting to load a library by its unversioned name, which is
- not installed by default. A fix has been checked-in upstream, but in the meantime, the workaround is to set
- network.negotiate-auth.gsslib to libgssapi_krb5.so.2.
-
- FC5 Update Update: If you are using the most recent Firefox or Mozilla, this workaround is
- no longer necessary.
+ blank, as it enables Kerberos ticket passing, which is not required.
Now, make sure you have Kerberos tickets. Typing kinit in a shell should allow you to
@@ -39,12 +30,12 @@
Troubleshooting
If you have followed the configuration steps and Negotiate authentication is not working, you can
turn on verbose logging of the authentication process, and potentially find the cause of the problem.
- Exit Firefox or Mozilla. In a shell, type the following commands:
+ Exit Firefox. In a shell, type the following commands:
export NSPR_LOG_MODULES=negotiateauth:5
export NSPR_LOG_FILE=/tmp/moz.log
- Then restart Firefox or Mozilla from that shell, and visit the website you were unable to authenticate
+ Then restart Firefox from that shell, and visit the website you were unable to authenticate
to earlier. Information will be logged to /tmp/moz.log, which may give a clue to the problem.
For example: