[39400] in Kerberos
Re: How to get Kerberos token for proxy authentication
daemon@ATHENA.MIT.EDU (Thomas Kula)
Thu Mar 21 11:24:24 2024
Date: Thu, 21 Mar 2024 11:24:09 -0400
From: Thomas Kula <kula@tproa.net>
To: kerberos@mit.edu
Message-ID: <ZfxRGUGVIIXJ42x+@gozer.tproa.net>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <202403201533.42KFXFYr006534@hedwig.cmf.nrl.navy.mil>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
On Wed, Mar 20, 2024 at 11:33:16AM -0400, Ken Hornstein via Kerberos wrote:
> >Thanks again Ken. My application is written in Go. So I'm looking
> >for Kerberos implementation that can be easily integrated with my
> >application. Hence I was considering MIT Kerberos and using C bindings
> >to call those APIs from my Go code. "MacOS X it might be easier to use
> >the native GSSAPI implementation which would be Heimdal"
> >
> >Here did you mean developer.apple.com/documentation/gss ? Isn't that in
> >Swift ? I will explore libcurl code thank-you.
>
> I can't speak for the Swift API, but Heimdal on MacOS X also provides a
> standard C API for the GSSAPI functions. I don't have much experience
> with Go but if you can call C functions from within it (and I have to
> believe that is possible) then doing so for Heimdal should be fine.
> There might be a few differences in term of what GSSAPI extension
> functions are available but from what you describe you should only need
> the standard GSSAPI functions.
Are you familiar with https://github.com/jcmturner/gokrb5? I've used it
in the past with some experiments in some Go code I was working on, I
wasn't touching GSSAPI but there's at least some GSSAPI code in there.
Might be worth checking out as it's native Go code, no cgo wrapping.
--
Thomas L. Kula | kula@tproa.net | https://kula.tproa.net/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
