Is there any kerberos environment I can use for testing?
Okay, it turns out that I can use vagrant/docker to set up one.
By and large, this looks good to me. @mjia can you let us know how functional testing goes with vagrant/docker?
By and large, this looks good to me. @mjia can you let us know how functional testing goes >with vagrant/docker?
Nah, I would not use vagrant/docker in the functional testings. It sounds like so complicated to me, :-). The thing I want to do is to set up a KDC server in order to manually verify that piece of code actually works.
I have tested this against a KDC server and it works.
https://paste.fedoraproject.org/paste/wIOMJYQAs0R8banrKXEOZV5M1UNdIGYhyRLivL9gydE=
Nice! :+1: to merge.
rebased
Pull-Request has been merged by mjia
It should really just default to using the default service principal in the keytab, with an option to use a different principal in case the keytab has keys for multiple principals for some reason.
Yeah, we could have a new configuration for this, something like: KRB_AUTH_PRINCIPAL = 'HTTP/hostname@EXMAPLE.COM' Then we do not need to call getServerPrincipalDetails here.