chromium and Kerberos TGT
To have chromium (and chrome) browser do Kerberos TGT for example.com web pages, one needs to pass
Easiest is to edit the
/usr/share/applications/chromium-browser.desktop file to have as Exec line;
Exec=/usr/bin/chromium-browser --auth-server-whitelist="*.example.com" --args %U
If you need delegation, obviously you’ll need two commandline option. See the FreeIPA chrome page for details.