[39397] in Kerberos
Re: How to get Kerberos token for proxy authentication
daemon@ATHENA.MIT.EDU (m_a_n_j_u_s_k--- via Kerberos)
Wed Mar 20 06:42:21 2024
Date: Wed, 20 Mar 2024 10:40:34 +0000 (UTC)
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Message-ID: <1607837619.5406090.1710931234295@mail.yahoo.com>
In-Reply-To: <202403200124.42K1Ogwb031014@hedwig.cmf.nrl.navy.mil>
MIME-Version: 1.0
From: m_a_n_j_u_s_k--- via Kerberos <kerberos@mit.edu>
Reply-To: "m_a_n_j_u_s_k@yahoo.com" <m_a_n_j_u_s_k@yahoo.com>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Thanks again Ken.
My application is written in Go. So I'm looking for Kerberos implementation that can be easily integrated with my application. Hence I was considering MIT Kerberos and using C bindings to call those APIs from my Go code.
"MacOS X it might be easier to use the native GSSAPI implementation which would be Heimdal"
Here did you mean developer.apple.com/documentation/gss ? Isn't that in Swift ?
I will explore libcurl code thank-you.
Yahoo Mail: Search, organise, conquer
On Wed, 20 Mar 2024 at 1:24 am, Ken Hornstein<kenh@cmf.nrl.navy.mil> wrote: >Thanks Ken,I understand I need to use GSSAPI for Linux/MacOS
>platforms. I was wondering if I can use MIT Kerberos GSSAPI for the
>same. Does libcurl use MIT Kerberos gssapi ? Yes my proxy header would
>look exactly like you mentioned. Thank-you.
You should be able to use the MIT Kerberos GSSAPI implementation fine
for this (but I think either MIT Kerberos or Heimdal would work; on
MacOS X it might be easier to use the native GSSAPI implementation which
would be Heimdal). My understanding is that libcurl can link against
either Heimdal or MIT Kerberos, but you should probably investigate that
yourself.
--Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
