Chrome v Kerberos

[Aaron Roots]

Just wondering if anyone has had much success with the Kerberos Login Handler and Chrome (on Mac and Linux (Debian))?

We have successfully configured for all other browsers – & even Chrome on Windows is working. The doco has proven most helpful: https://wiki.shibboleth.net/confluence/display/SHIB2/Single+sign-on+Browser+configuration

What is strange is Chrome appears to be successfully obtain service tickets (running klist at certain points confirms this) - running a tcpdump on the client and server seem to indicate all is well. Cannot see a difference between traffic sent by other browsers and Chrome – however after Chrome sent the Kerberos ticket the Login Handler ends up doing whatever it does to make request.getAttribute("krbLoginFailed") true – whereas the other browser signs on with the same Service Ticket.

We've tried various other options to feed Chrome on the command like – it's not changing any behaviour as far as we can see

Mainly am bit confused by it all – at the moment it'd just be good to hear if other have it working or have had trouble too.

Cheers
Aaron
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120518/afdaac88/attachment.html