Get Firefox to do NTLM

From Patrick Cauldwell's Blog - Firefox and Sharepoint

Being a dedicated Firefox user, one of the few things that was still thwarting me was SharePoint.  We use SharePoint internally for a ton of stuff, and it was a drag to have to fall back to that other browser.  SharePoint pages look and work fine in Firefox, but I was having to reauthenticate on every single page, which really hindered my enjoyment of the experience.

I finally figured out how to get Firefox to do NTLM, which means I don’t have to deal with the authentication dialogs, thereby reducing my dependence on IE to one and only one application (Oddpost). 

It’s not at all obvious how to make it work, and it took me a few tries.  You have to go to your Firefox address bar and type about:config.  This will bring up the internal config editor, which allows you to set all kinds of properties that influence Firefox’s behavior.  Look for the key called network.automatic-ntlm-auth.trusted-uris.  Set that key’s value to a comma separated list of servers you want NTLM auth for.  So if your internal SharePoint sites are on servers called Larry and Mo, use “larry,mo”.  You can also add the same value to the key network.negotiate-auth.trusted-uris.  It’s unclear to me if that second one is required, but I set it, and everything works.  Now SharePoint works like a champ, and authenticates automatically.

I only had to set network.automatic-ntlm-auth.trusted-uris and it works like a charm, although the likelihood of finding out this information on your own is slim. Even if you know the config setting name Google only knows about 27 pages with a reference to it and several of those are non-english. A classic case of geekism, you can do it, but only if you know the secret incantation (reminds me of all those “magic” registry settings).

Browse by topic:

Comments

TrackBack from JerryWho's Weblog:

In Intranet-Umgebung kann die NTLM-Authentifizierung des Internet Explorers einiges an Komfort bringen. Sie ermöglicht es, dass der Benutzer sich automatisch mit seiner Windows-Domänenanmeldung auch beim Webserver authentifiziert. Die Webanwendung kann also gleich personifizierte Seiten ausliefern.Als Firefox-Benutzer hatte ich bis jetzt diesen Komfort nicht. Ich musste mich jedesmal neu anmelden -- bis jetzt. Auf der folgenden Seite fand ich die Lösung.Man ruft per about:config das Konfigurationsmenü des Firefox auf und sucht den Eintrag network.automatic-ntlm-auth.trusted-uris. Dort trägt man dann eine Komma separierte Liste der Domains ein, an die automatisch die Anmeldedaten geschickt werden sollen.

A classic case of geekism, you can do it, but only if you know the secret incantation (reminds me of all those “magic” registry settings

...or you type NTLM in the about:config filter textbox. Rocket science?

I tried to set set network.automatic-ntlm-auth.trusted-uris, do you think maybe its my Firefox version? im running Firefox 2 due to security issues

Wow really a great posting. I tried to set set network.automatic-ntlm-auth.trusted-uris, do you think maybe its my Firefox version? weight management