Integrated Windows Auth (NTLM) on a Mac using Google Chrome or Safari Integrated Windows Auth (NTLM) on a Mac using Google Chrome or Safari google-chrome google-chrome

Integrated Windows Auth (NTLM) on a Mac using Google Chrome or Safari


This isn't a bug at the moment. The Mac version of Chrome simply does not support/respect Kerberos policies ("Negotiate" Windows Authentication) unless the domain white-listed and the browser fired from the command line. See this link posted 10/31/2011:

http://code.google.com/p/chromium/issues/detail?id=102339

It looks like you might be able to permanently white-list a domain though:

http://www.google.com/support/forum/p/Chrome/thread?tid=592eb87350d9d528&hl=en


Since you have already tried the white-list switch, I looked closer and it is an OSX thing... 10.7 is necessary for the switch to work properly with Chrome. Your 10.6 version won't work without a third party tool like Centrify.

Not a happy answer, but the truth.


It seems we can do the following configuration in Terminal,

$ defaults write com.google.Chrome AuthServerWhitelist "*.example.com"$ defaults write com.google.Chrome AuthNegotiateDelegateWhitelist "*.example.com"$ defaults write com.google.Chrome AuthSchemes "digest,ntlm,negotiate"


defaults write com.google.Chrome AuthServerWhitelist '<your domain>' will permanently allow kerberos to a server or set of servers (*.mydomain.local).