Auto authenticate with Windows AD-user failed with Chrome

[yswang1024]

Hi !
Chrome display pop-up authentication windows. But I search results about that, all the answers told that "Google chrome is automatically configured to send the proper credential." , so may I did any wrongs ?

[yswang1024]

configured firefox is working fine

[yswang1024]

and demo link here : https://github.com/Waffle/waffle/blob/master/Source/JNA/waffle-demo/waffle-spring-boot-filter2/src/main/java/waffle/spring/boot/demo/SecurityConfig.java

[pedroneil]

If you are accessing your app from a device on a different dns domain to the web app dns domain. Your ad is mybiz.com and your app is on internal dns e.g. ourbizapps.com or your request is going through a proxy. If there is a proxy either have a proxy direct rule added to go direct to your app domain or get your proxy updated allow ntlm to pass through. you can test direct skipping proxy by using a chrome command line option to have b chrome go direct for the app ip address. This issue often occurs when your pc is on a different domain to the app server eg. mypc.mybiz.com and the app server is in a different domain myapp.ourbizapps.com It is more than likely that Chrome is not sending the Kerberos token, and you have the basic authentication filter configured, which is why you would get the basic auth challenge. On an intranet your app device must be in the trusted site zone or intranet zone. You might be able to see in Internet settings (inetcpl.cpl) if not blocked by a GPO. Add the ip address to intranet zone of your device or use the server name and FQDN of your organisation eg. myapp.ourbizapps.com:8080 If the app is in a different Web dns domain to the pc To test. Add your app server in your local windows\syste32\drivers\etc\hosts 192.168.2.128 myapp.ourbizapps.com

…

On Wed, 9 Feb 2022, 03:04 王玉山, ***@***.***> wrote: Hi ! Chrome display pop-up authentication windows. But I search results about that, all the answers told that "Google chrome is automatically configured to send the proper credential." , so may I did any wrongs ? [image: image] <https://user-images.githubusercontent.com/44884868/153114066-192ac800-2c8b-434c-9781-ebd73b40783d.png> — Reply to this email directly, view it on GitHub <#1477>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAQAQNE2YLGDQMUZQ3OKXJDU2HKSVANCNFSM5N4HYJEA> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you are subscribed to this thread. Message ID: ***@***.***>