Users Guide

Mozilla Firefox
1. In Firefox, type about:config in the address bar.
NOTE: If the browser displays the This might void your warranty warning, click I'll be careful. I
promise.
2. In the Filter text box, type negotiate.
The browser displays a list of preference names limited to those containing the word negotiate.
3. From the list, double-click network.negotiate-auth.trusted-uris.
4. In the Enter string value dialog box, type the CMC's domain name and click OK.
Configuring Browser For Smart Card Login
Mozilla Firefox — CMC 2.10 does not support Smart Card login through the Firefox browser.
Internet Explorer — Ensure that the Internet Browser is configured to download Active-X plug-ins.
Configuring CMC SSO Or Smart Card Login For Active
Directory Users
You can use CMC Web interface or RACADM to configure CMC SSO or smart card login.
Related Links
Prerequisites For Single Sign-On Or Smart Card Login
Uploading the Keytab File
Configuring CMC SSO Or Smart Card Login For Active Directory Users Using
Web Interface
To configure Active Directory SSO or smart card login for CMC:
NOTE: For information about the options, see the CMC Online Help.
1. While configuring Active Directory to setup a user account, perform the following additional steps:
• Upload the keytab file.
• To enable SSO, select Enable Single Sign-On option.
• To enable smart card login, select Enable Smart-Card Login option.
NOTE: All command line out-of-band interfaces including secure shell (SSH), Telnet, Serial,
and remote RACADM remain unchanged if this option is selected.
2. Click Apply.
The settings are saved.
You can test the Active Directory using Kerberos authentication using the RACADM command:
testfeature -f adkrb -u <user>@<domain>
where <user> is a valid Active Directory user account.
A command success indicates that CMC is able to acquire Kerberos credentials and access the user's
Active Directory account. If the command is not successful, resolve the error and run the command
163