We just completed a migration from Firefox to Chrome as the default browser at our company. Also, we are a Google Apps customer.
We have internal web-based workflows that use Kerberos delegation (forwardable tickets) to pass data between multiple servers.
For our Windows machines, we have implemented a registry setting (
AuthNegotiateDelegateWhitelist) that enables Chrome to pass this delegation correctly. You can also use command-line flags to do the same thing. (
See here - specifically, I'm looking at the --auth-negotiate-delegate-whitelist setting.)
However, part of the reason to move to Chrome is to provide a migration path to Chromebooks/boxes. I can't find a way to configure ChromeOS with this same setting.
It appears that if you enter developer mode, that you can edit the /sbin/session_manager_setup.sh to include the command-line switch necessary to enable this in ChromeOS. Unfortunately, you have to remain in developer mode to keep the setting active.
Is there anyway to accomplish what I'm trying to do? For example, is there a way to write a custom extension that would enable this that I can push out through our Chrome policies? If so, are there examples to help me get started?
Thanks in advance,
French