title: Kerberos delegation doesn't work in chrome
body: <p>I have an IIS 7 server with 2 sites - site1, site2.</p>
  
  <p>site1 binds port 80, site2 binds port 81.</p>
  
  <p>I have a web page in site2 which sends an http get request via <code>$.ajax()</code> to a URL in site1.</p>
  
  <p>I've configured both site to use kerberos:</p>
  
  <ol>
  <li><p>Enabled only windows authentication, selected only negotiate:kerberos in providers.</p></li>
  <li><p>Configured SPN for the user/server in AD.</p></li>
  </ol>
  
  <p>I use fiddler to monitor the request headers.</p>
  
  <ol>
  <li><p>When I use IE8, I see that kerberos ticket is delegated from site2 to site1 via 2-hop, the way kerberos should work.</p></li>
  <li><p>When I use chrome, I see that keberos ticket is not delegated. I get an 401 error.</p></li>
  </ol>
  
  <p>I tried setting:</p>
  
  <pre><code>[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
  "AuthNegotiateDelegateWhitelist"="*" 
  </code></pre>
  
  <p>...(and specifically the server name), but it has not worked.</p>
  
  <p>Any ideas?</p>