chromium and Kerberos TGT

To have chromium (and chrome) browser do Kerberos TGT for example.com web pages, one needs to pass --auth-server-whitelist="*.example.com"

Easiest is to edit the /usr/share/applications/chromium-browser.desktop file to have as Exec line;

Exec=/usr/bin/chromium-browser --auth-server-whitelist="*.example.com" --args %U

If you need delegation, obviously you’ll need two commandline option. See the FreeIPA chrome page for details.