I've managed to get kerberos authentication to work now with Apache and Likewise Open but so far, Google Chrome doesn't seem to play fair.

Unless I start it with chrome.exe --auth-server-whitelist="*company.com" it does only pop-up a login window but will not accept any credentials at all.

As far as I know, the --auth-server-whitelist option should only be used when trying to get Single-Sign-On (SSO) to work, but if you are fine with a log-in window it should work directly out of the box, but so far it doesn't.

This is the error I get in the apache logs.

[Tue Dec 13 08:49:04 2011] [error] [client 192.168.1.15] failed to verify krb5 credentials: Unknown code krb5 7

link|improve this question

80% accept rate
1  
What version of windows / chrome do you use to test it? Does SSO on IE / firefox works OK ? What if you typed in the username and password twice ? I have a problem where apache ask for credentials twice : serverfault.com/questions/100288/…. – Rianto Wahyudi Jan 2 at 21:01
feedback

1 Answer

Make sure the server is in Local Intranet zone: this matters for SSPI wich Chrome seems to use.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.