[jboss-cvs] JBossAS SVN: r74852 - in projects/security/security-negotiation/trunk/docs/userguide/en: modules and 1 other directory.

[jboss-cvs-commits at lists.jboss.org]

Author: darran.lofthouse at jboss.com
Date: 2008-06-19 14:59:51 -0400 (Thu, 19 Jun 2008)
New Revision: 74852

Added:
   projects/security/security-negotiation/trunk/docs/userguide/en/images/ff-about.png
   projects/security/security-negotiation/trunk/docs/userguide/en/images/ff-secured.png
   projects/security/security-negotiation/trunk/docs/userguide/en/images/ff-trusted.png
Modified:
   projects/security/security-negotiation/trunk/docs/userguide/en/modules/firefox.xml
   projects/security/security-negotiation/trunk/docs/userguide/en/modules/microsoft_ad.xml
Log:
[SECURITY-154] Added Firefox configuration.

Added: projects/security/security-negotiation/trunk/docs/userguide/en/images/ff-about.png
===================================================================
(Binary files differ)


Property changes on: projects/security/security-negotiation/trunk/docs/userguide/en/images/ff-about.png
___________________________________________________________________
Name: svn:executable
   + *
Name: svn:mime-type
   + application/octet-stream

Added: projects/security/security-negotiation/trunk/docs/userguide/en/images/ff-secured.png
===================================================================
(Binary files differ)


Property changes on: projects/security/security-negotiation/trunk/docs/userguide/en/images/ff-secured.png
___________________________________________________________________
Name: svn:executable
   + *
Name: svn:mime-type
   + application/octet-stream

Added: projects/security/security-negotiation/trunk/docs/userguide/en/images/ff-trusted.png
===================================================================
(Binary files differ)


Property changes on: projects/security/security-negotiation/trunk/docs/userguide/en/images/ff-trusted.png
___________________________________________________________________
Name: svn:executable
   + *
Name: svn:mime-type
   + application/octet-stream

Modified: projects/security/security-negotiation/trunk/docs/userguide/en/modules/firefox.xml
===================================================================
--- projects/security/security-negotiation/trunk/docs/userguide/en/modules/firefox.xml	2008-06-19 18:46:08 UTC (rev 74851)
+++ projects/security/security-negotiation/trunk/docs/userguide/en/modules/firefox.xml	2008-06-19 18:59:51 UTC (rev 74852)
@@ -5,8 +5,80 @@
   <title>Mozilla Firefox</title>
 
   <section>
-    <title></title>
+    <title>Introduction</title>
 
-    <para></para>
+    <para>
+      This chapter describes the configuration required to enable SPNEGO
+      negotiation in Mozilla Firefox. These instructions are prepared
+      against Mozilla Firefox 2.0.0.11 on Microsoft Windows 2003
+    </para>
   </section>
+
+  <section>
+    <title>Configuration</title>
+
+    <para>
+      To configure Mozilla Firefox you should navigate to the
+      about:config URL which will display all of the configuration
+      options for Firefox.
+    </para>
+
+    <para>
+      Set the filter to 'network.negotiate' to reduce the list to the
+      options that relate to negotiation.
+    </para>
+
+    <figure id="ff-about">
+      <title>Firefox Configuration</title>
+      <mediaobject>
+        <imageobject>
+          <imagedata align="center" fileref="images/ff-about.png" />
+        </imageobject>
+      </mediaobject>
+    </figure>
+
+    <para>
+      The two values which are important are
+      'network.negotiate-auth.trusted-uris' and
+      'network.negotiate-auth.delegation-uris', the first of these
+      specifies which uris will be trusted for SPNEGO negotiation and
+      the second specifies which the users credentials will actually be
+      delegated to.
+    </para>
+
+    <para>
+      For the current implementation only trust is required, the use of
+      delegation is something that will be added in future releases.
+    </para>
+
+    <para>
+      The URIS that are entered for the above values can be anything
+      from a partial URI e.g. 'http://', 'testserver' to the full URI
+      e.g. 'http://testserver.jboss.org'.
+    </para>
+
+    <figure id="ff-trusted">
+      <title>Firefox Configuration</title>
+      <mediaobject>
+        <imageobject>
+          <imagedata align="center" fileref="images/ff-trusted.png" />
+        </imageobject>
+      </mediaobject>
+    </figure>
+
+    <para>
+      As with Internet Explorer negotiation is automatic and this can be
+      demonstrated using the negotiation toolkit.
+    </para>
+
+    <figure id="ff-secured">
+      <title>Firefox Negotiation Toolkit</title>
+      <mediaobject>
+        <imageobject>
+          <imagedata align="center" fileref="images/ff-secured.png" />
+        </imageobject>
+      </mediaobject>
+    </figure>
+
+  </section>
 </chapter>
\ No newline at end of file

Modified: projects/security/security-negotiation/trunk/docs/userguide/en/modules/microsoft_ad.xml
===================================================================
--- projects/security/security-negotiation/trunk/docs/userguide/en/modules/microsoft_ad.xml	2008-06-19 18:46:08 UTC (rev 74851)
+++ projects/security/security-negotiation/trunk/docs/userguide/en/modules/microsoft_ad.xml	2008-06-19 18:59:51 UTC (rev 74852)
@@ -53,9 +53,12 @@
     </para>
 
     <warning>
-      It is important to set a valid password on the account as soon as
-      you create as changing the password later can invalidate the
-      keytab that you export which would break your JBoss installations.
+      <para>
+        It is important to set a valid password on the account as soon
+        as you create as changing the password later can invalidate the
+        keytab that you export which would break your JBoss
+        installations.
+      </para>
     </warning>
 
     <para>The first step is to create the actual user.</para>