<- Chrome Settings Library

KerberosAccounts

Configure Kerberos accounts
Last updated October 8, 2024

Adds prefilled Kerberos accounts. If the Kerberos credentials match the login credentials, an account can be configured to reuse the login credentials by specifying '${LOGIN_EMAIL}' and ${PASSWORD}' for principal and password, respectively, so that the Kerberos ticket can be retrieved automatically, unless two-factor authentication is configured. Users cannot modify accounts added via this policy. If this policy is enabled, the list of accounts defined by the policy is added to the Kerberos Accounts settings. If this policy is disabled or not set, no accounts are added to the Kerberos Accounts settings and all accounts previously added with this policy are removed. Users may still add accounts manually if the 'Users can add Kerberos accounts' policy is enabled.

Supported On:
Platform Start End
ChromeOS 87
Example value:

{"0":{"password":"${PASSWORD}","principal":"${LOGIN_EMAIL}"},"1":{"principal":"user1@REALM.COM","remember_password_from_policy":true},"2":{"krb5conf":{"0":"[libdefaults]","1":" default_tgs_enctypes = aes256-cts-hmac-sha1-96","2":" default_tkt_enctypes = aes256-cts-hmac-sha1-96","3":" permitted_enctypes = aes256-cts-hmac-sha1-96","4":" default_realm = REALM.COM","5":"","6":"[realms]","7":" REALM.COM = {","8":" kdc = us-west.realm.com","9":" master_kdc = us-west.realm.com","10":" kpasswd_server = us-west.realm.com","11":" }"},"password":"p4zzw0rd!","principal":"user2@REALM.COM"}}

Features: