I've managed to get kerberos authentication to work now with Apache and Likewise Open but so far, Google Chrome doesn't seem to play fair.

Unless I start it with chrome.exe --auth-server-whitelist="*company.com" it does only pop-up a login window but will not accept any credentials at all.

As far as I know, the --auth-server-whitelist option should only be used when trying to get Single-Sign-On (SSO) to work, but if you are fine with a log-in window it should work directly out of the box, but so far it doesn't.

This is the error I get in the apache logs.

[Tue Dec 13 08:49:04 2011] [error] [client] failed to verify krb5 credentials: Unknown code krb5 7

  • 1
    What version of windows / chrome do you use to test it? Does SSO on IE / firefox works OK ? What if you typed in the username and password twice ? I have a problem where apache ask for credentials twice : serverfault.com/questions/100288/…. – Rianto Wahyudi Jan 2 '12 at 21:01

Make sure the server is in Local Intranet zone: this matters for SSPI wich Chrome seems to use.

  • 1
    That was all it took in my case. Nice one! – David North Jan 22 '18 at 17:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.