title: Configuring Firefox 3.0.x to send a Kerberos token
body: <p>I'm trying to convince Firefox 3.0.14 to send a Kerberos token.  I have configured the service correctly and IE will send a Kerberos token (i.e. starting YI..), but after adding the hostname to the network.negotiate-auth.trusted-uris and network.negotiate-auth.delegation-uris settings in about:config, Firefox only sends an NTLM token.  Here's the (cut down) output from Live Headers:</p>
  
  <p>to server -></p>
  
  <pre><code>GET /testsso.jsp HTTP/1.1
  </code></pre>
  
  <p>&lt;- from server</p>
  
  <pre><code>HTTP/1.x 401 Unauthorized
  WWW-Authenticate: Negotiate
  </code></pre>
  
  <p>to server -></p>
  
  <pre><code>GET /testsso.jsp HTTP/1.1
  Authorization: Negotiate TlxxxxxxxxQ=
  </code></pre>
  
  <p>&lt;- from server</p>
  
  <pre><code>HTTP/1.x 401 Unauthorized
  WWW-Authenticate: Negotiate
  </code></pre>
  
  <p>The server is only interested in a Kerberos token, i.e. one starting in YI, so issues the Unauthorized on the second request, at which point Firefox gives up.</p>
  
  <p>I'm using Windows 2003.  Any thoughts?</p>
  
  <p>J</p>