Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've managed to get kerberos authentication to work now with Apache and Likewise Open but so far, Google Chrome doesn't seem to play fair.

Unless I start it with chrome.exe --auth-server-whitelist="*company.com" it does only pop-up a login window but will not accept any credentials at all.

As far as I know, the --auth-server-whitelist option should only be used when trying to get Single-Sign-On (SSO) to work, but if you are fine with a log-in window it should work directly out of the box, but so far it doesn't.

This is the error I get in the apache logs.

[Tue Dec 13 08:49:04 2011] [error] [client 192.168.1.15] failed to verify krb5 credentials: Unknown code krb5 7

share|improve this question
1  
What version of windows / chrome do you use to test it? Does SSO on IE / firefox works OK ? What if you typed in the username and password twice ? I have a problem where apache ask for credentials twice : serverfault.com/questions/100288/…. –  Rianto Wahyudi Jan 2 '12 at 21:01

1 Answer 1

Make sure the server is in Local Intranet zone: this matters for SSPI wich Chrome seems to use.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.