#!/bin/bash
##########################################################################
# Shellscript	:  	SSO Log-IN via Chrome
# Author   	  	: 	Andreas Vogel, macenterprise gmbh 2019
# Source	 	:	Email vom 20.05.2019 von Peyrer, Marc 
#				: 	here’s one more thing for Mac Users:
#				 If you apply the following tweak to your Chrome configuration, you not only can access Pinky with Chrome browser on your Mac, but ALSO access intranet (https://intranet.ing.net), and ServiceNow (https://ingdibaprod.service-now.com) with Kerberos SSO. No need to enter your Win username/password again and again.
##########################################################################

# Variable
user=$(stat -f '%u %Su' /dev/console | cut -d ' ' -f 2)
# Setze die Werte 

defaults write /Users/$user/Library/Preferences/com.google.Chrome DisableAuthNegotiateCnameLookup "<true/>"

defaults write /Users/$user/Library/Preferences/com.google.Chrome AuthServerWhitelist "*.ing.net, *lionsdesk.corp.int*, *.corp.int, *.service-now.com, servicenow-prod, afidicp, pinky, condeco"

defaults delete /Users/$user/Library/Preferences/com.google.Chrome AuthNegotiateDelegateWhitelist

# Der Owner muss wieder der User sein

chown $user:staff /Users/$user/Library/Preferences/com.google.Chrome.plist