Firefox

In Firefox on CNF Linux, GSSAPI Authentication ("auth negotiate") may already be enabled. You can confirm this with the following steps.

1. Open Firefox
2. In the URL bar, type in:
   about:config
3. On the "Proceed with Caution" window, click "Accept the Risk and Continue"
4. In the "Search preference name" box, type in:
   negotiate*trusted
5. There will be a single result: network.negotiate-auth.trusted-uris
6. This single result should be set to:
   https://
7. If it is not, you can click the 'pencil; icon on that row, and then type in:
   https://
   and then click the check box to confirm your change
8. Close this tab. Your are all set.

Chrome

In Chrome on CNF Linux, CNF has deployed a policy for you that enables GSSAPI Authenticaation ("auth negotiate").

The deployed policy enables the following policy setting: AuthServerAllowlist

You can confirm the policy setting by:

1. Open Chrome
2. In the URL bar, type in:
   chrome://policy
3. In the Policies search box, type in:
   AuthServer
4. If there are no results, this policy value is not correctly set.
5. You should see a result with "AuthServerAllowlist" being set to ".cnf.cornell.edu"