Firefox does not allow SSO unless the native gsslib is used. What is the correct config for Firefox's network.negotiate-auth.using-native-gsslib setting on Mac OS X?
Use the "network.negotiate-auth.using-native-gsslib = true". Using Quests is not best practices on a Mac. Using the system one is. We store the kerberos tickets in the local ccache. When Firefox uses the native gsslib, it will use the tickets that we created and maintain.