Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Panel

Firefox is the Mozilla Corporation's web browser. See the Mozilla Corporation's website for more details. Iceweasel is the Debian project's version of Firefox that is free of Mozilla's trademarks.Various Firefox derivatives exist, including Iceweasel, a Mozilla-trademark-free version of the browser on Debian

Contents

Table of Contents

Numbered Headings

Overview

Most modern versions of Firefox and Iceweasel are generally compatible with Moonshot.

On Linux, Firefox and Iceweasel are is integrated with the GSS-API and use uses the Moonshot Identity Selector.

macOS support is currently in development, you must currently use the .gss_eap_id file in your home directory. See the macOS Compatibility List for more details.

On Windows, Firefox is integrated with the Windows Security Support Provider Interface (SSPI) and requires the Moonshot SSP.

Compatibility

Key

In the tables below, the following icons have the following meanings:

  • (tick) - This version of the software has been tested and verified as supporting Moonshot.
  • (error) - This version of the software has been tested and verified as not supporting Moonshot.
  • (question) - This version of the software has not yet been tested thoroughly and its status is not known. Let us know if you have tried it and whether it worked or not!

Compatibility List

Note that accessing supported versions of this software requires a Moonshot compatible client - see the next section for details on which clients are supported.

Note

Any versions not listed below have not yet been tested. If you do so, please let us know!

VersionCompatible?Notes
Firefox v59(tick)When running on a supported platform
Firefox v35(tick)When running on a supported platform
Firefox v33(tick)When running on a supported platform
Firefox v31(tick)When running on a supported platform
Iceweasel v31(tick)When running on a supported platform
Iceweasel v24(tick)When running on a supported platform
Firefox v22(tick)When running on a supported platform

Installation Instructions

This software does not require any special installation instructions - install it as you normally would.

Configuration Instructions

By default, Firefox and Iceweasel disable disables the Negotiate options in their configuration for security reasons.

To enable these, follow the below steps:

  1. Open a new tab in the browser
  2. Into the address field type about:config and confirm the subsequent warning:

  3. Into the Preferences search bar type negotiate to show the Negotiate options
     
  4. Adjust the network.negotiate-auth.trusted-uris and/or network.negotiate-auth.delegation-uris options with the hosts or realms that you would like to enable Negotiate authentication for:
  5. On versions of macOS later than El Capitan, you must also sidestep the Apple sandboxing functionality:
    1. Create a soft link to the existing Kerberos library:

      Code Block
      languagebash
      sudo ln -s /System/Library/Frameworks/Kerberos.framework/Kerberos /usr/local/lib/libgssapi_krb5.dylib


    2. Adjust the network.negotiate-auth.gsslib option with the location of the 'new' library you set in the step above:
      Image Added
  6. Restart your browser.

For more information on Firefox and the Negotiate protocol, visit the Mozilla Developer Network page on Integrated Authentication.

Credential Storage

Windows

On Windows, you must store the website credentials in the Windows Credential Manager before you try to connect to the website. For more information on storing credentials in the Credential Manager, see Section 2.2 of the Windows Credential Manager page.

Note

Not using the Windows Credential Manager will cause a HTTP 403 error to be displayed. Firefox will not prompt for alternate credentials.

Linux

On Linux you should use the Moonshot Identity Selector.

macOS

macOS support is currently in development, you must currently use the .gss_eap_id file in your home directory. See the macOS Compatibility List for more details.

Server Compatibility

The following servers are known to work with this server software using Moonshot authentication (click on the link to see further information about enabling Moonshot in that server):