chromium and Kerberos TGT

Table of Contents

To have chromium (and chrome) browser do Kerberos TGT for web pages, one needs to pass --auth-server-whitelist="*"

Easiest is to edit the /usr/share/applications/chromium-browser.desktop file to have as Exec line;

Exec=/usr/bin/chromium-browser --auth-server-whitelist="*" --args %U

If you need delegation, obviously you’ll need two commandline option. See the FreeIPA chrome page for details.