New issue
Advanced search Search tips

Issue 918827 link

Starred by 2 users

Issue metadata

Status: Unconfirmed
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Feature



Sign in to add a comment

Kerberos delegation does not work in headless mode

Reported by boyan.mi...@gmail.com, Jan 3

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36

Steps to reproduce the problem:
1. Run ./chrome --headless --window-size=1920,1080 --disable-gpu
2. Navigate to a page which uses Kerberos and tries to delegate the ticket to a another one (two-hop)

What is the expected behavior?
The page is accessed normally

What went wrong?
The Kerberos ticket does not get delegated. Using the GUI I have fixed this by modifying AuthNegotiateDelegateWhitelist in the Windows registry, but it does not seem to work in headless mode.

Did this work before? No 

Does this work in other browsers? Yes

Chrome version: 71.0.3578.98  Channel: stable
OS Version: 10.0
Flash Version:
 
Labels: Needs-Triage-M71
Components: -Blink>Internals Internals>Headless Internals>Network>Auth
Labels: -Type-Bug Type-Feature
asanka: Not an auth problem per-se, as it looks like AuthNegotiateDelegateWhitelist is exposed via prefs, but it's only wired up via Chrome Policies, thus there's no way to get it to Headless.

I'm marking this as a Feature Request (for Headless to support; whether the full policy set or to allow customizable prefs to be provided), and hopefully the Headless team can respond/prioritize.

Sign in to add a comment