From 0b93fc2ba50b334668c9beb3c5813f60bda5e3c8 Mon Sep 17 00:00:00 2001
From: Raphael Dannecker <raphael.dannecker@steinbeisschule-reutlingen.de>
Date: Mon, 4 Sep 2023 11:38:39 +0200
Subject: [PATCH] kerberize chromium

---
 roles/kerberize/tasks/main.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/roles/kerberize/tasks/main.yml b/roles/kerberize/tasks/main.yml
index aab5553..b117895 100644
--- a/roles/kerberize/tasks/main.yml
+++ b/roles/kerberize/tasks/main.yml
@@ -31,3 +31,11 @@
     - 'pref("network.negotiate-auth.delegation-uris", "{{ kerberize_uris | default(ansible_domain) }}");'
     - 'pref("network.negotiate-auth.trusted-uris", "{{ kerberize_uris | default(ansible_domain) }}");'
   when: firefox.stat.exists
+
+- name: kerberize chromium for sites in the local domain
+  copy:
+    dest: /etc/chromium/policies/managed/idam.json
+    content: |
+      {
+        "AuthServerAllowlist": "idam.steinbeis.schule"
+      }