Page 1 of 1

CEFCharp disable-auth-negotiate-cname-lookup not working

PostPosted: Thu Sep 16, 2021 9:34 am
by tomcan
I am trying to use DisableAuthNegotiateCnameLookup flag not to use canonical DNS name of user when generating a Kerberos SPN. However the flag doesn't work and canonical DNS name is still used instead of the original URI. Here is how I set disable-auth-negotiate-cname-lookup flag.

var settings = new CefSettings();
settings.CefCommandLineArgs.Add("disable-auth-negotiate-cname-lookup", "true");
settings.CefCommandLineArgs.Add("auth-server-whitelist", "*");
settings.CefCommandLineArgs.Add("auth-negotiate-delegate-whitelist", "*");

I have struggled on this issue for weeks and still could not find answer or workaround solution. I have tried different CefSharp version v93/v92/v91 and none of them works. Hopefully someone can help me and give me some suggestion. Thanks in advance.

Re: CEFCharp disable-auth-negotiate-cname-lookup not working

PostPosted: Thu Sep 16, 2021 3:28 pm
by amaitland
This should probably be in the generic support section as it's not CefSharp specific.

CEF only supports a subset of command line args, if it doesn't work then code changes are likely required.

As a test you can try disabling CEFs request interception.

https://github.com/chromiumembedded/cef ... es.cc#L129