[snap] Firefox snap cannot use kerberos authentication

[Sergei Genchev]

Applies to Ubuntu 22.04 and any other versions where firefox runs as snap:
firefox:
  Installed: 1:1snap1-0ubuntu2
  Candidate: 1:1snap1-0ubuntu2
  Version table:
 *** 1:1snap1-0ubuntu2 500
        500 http://us.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
        100 /var/lib/dpkg/statu

 You can configure Firefox to use negotiate authentication with kerberos. https://people.redhat.com/mikeb/negotiate/ on how to do this.
 To use kerberos auth, Firefox needs to read kerberos ticket cache, default to /tmp/krb5cc_${id -u}. Since Firefox runs as a snap in 22.04, and possibly other versions, it cannot read this cache, and thus cannot use kerberized authentication.
Firefox installed as native application works as expected.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Santiago Gala (sgala)]

In bug #1970182 there is a workaround for the issue: adding something similar to

default_ccache_name = FILE:/home/%{username}/krb5cc

under [libdefaults] will make the ticket store visible to firefox and, thus, fix the authentication.