| # Kerberos |
| |
| This directory contains the Kerberos service, which provides functionality for |
| getting and managing Kerberos tickets (including auto-renewing tickets). It is |
| used by Chrome to provide Kerberos Single-SignOn (SSO). Think of it as a fancy |
| wrapper around kinit, kpasswd and klist. |
| |
| The service is started by Chrome on demand, e.g. when the user navigates to the |
| Kerberos Accounts settings page or when accounts are added by the |
| KerberosAccounts user policy. Therefore, the service runs within a user session |
| only. |
| |
| Note that Chrome only uses this service if the kerberos.enabled pref is |
| enabled. The KerberosEnabled policy maps to that pref. As a consequence, |
| Kerberos Service is restricted to managed devices, for the time being. |
