proc_using-freeipa-credentials-to-log-in-to-the-ProjectWebUI-with-a-Chrome-browser.adoc

Using {FreeIPA} credentials to log in to the {ProjectWebUI} with a Chrome browser

This section describes how to use a Chrome browser to log in to your {ProjectWebUI} with your {FreeIPA} login and password.

Prerequisites

• You have enrolled your {ProjectServer} into {FreeIPA} and configured the server to use {FreeIPA} for authentication. For more information, see {InstallingServerDocURL}Using_FreeIPA_{project-context}[Using {FreeIPA}] in {InstallingServerDocTitle}.

• The host on which you are using the Chrome browser to log in to the {ProjectWebUI} is an {FreeIPA} client.

• You have a valid {FreeIPA} login and password.

• {Team} recommends using the latest stable Chrome browser.

• An {FreeIPA} server is running and reachable by the host.

Procedure

1. Enable the Chrome browser to use Kerberos authentication:

   $ google-chrome --auth-server-whitelist=".example.com" --auth-negotiate-delegate-whitelist=”.example.com"

   Note	Instead of allowlisting the whole domain, you can also allowlist a specific {ProjectServer}.

2. Obtain the Kerberos ticket-granting ticket (TGT) for yourself using your {FreeIPA} credentials:

   $ kinit idm_user
   Password for idm_user@_EXAMPLE.COM:

3. In your browser address bar, enter the URL of your {ProjectServer}.

   You are logged in automatically.

Note	Alternatively, you can skip the first three steps and enter your login and password in the fields displayed on the {ProjectWebUI}. This is also the only option if the host from which you are accessing the {ProjectWebUI} is not an {FreeIPA} client.