caption: Disable CNAME lookup when negotiating Kerberos authentication
default: false
desc: |-
  Setting the policy to Enabled skips CNAME lookup. The server name is used as entered when generating the Kerberos SPN.

  Setting the policy to Disabled or leaving it unset means CNAME lookup determines the canonical name of the server when generating the Kerberos SPN.
example_value: false
features:
  dynamic_refresh: true
  per_profile: false
future_on:
- fuchsia
items:
- caption: Disable CNAME lookup during Kerberos authentication
  value: true
- caption: Use CNAME lookup during Kerberos authentication
  value: false
owners:
- file://components/policy/OWNERS
- rsorokin@chromium.org
schema:
  type: boolean
supported_on:
- chrome.*:9-
- android:46-
- chrome_os:62-
tags: []
type: main
