#15 support kerberos authentication
Merged by mjia. Opened by mjia.
mjia/waiverdb support_kerberos  into  master

Download 15.patch
no initial comment

Is there any kerberos environment I can use for testing?

Is there any kerberos environment I can use for testing?

Okay, it turns out that I can use vagrant/docker to set up one.

By and large, this looks good to me. @mjia can you let us know how functional testing goes with vagrant/docker?

By and large, this looks good to me. @mjia can you let us know how functional testing goes >with vagrant/docker?

Nah, I would not use vagrant/docker in the functional testings. It sounds like so complicated to me, :-). The thing I want to do is to set up a KDC server in order to manually verify that piece of code actually works.

I have tested this against a KDC server and it works.

https://paste.fedoraproject.org/paste/wIOMJYQAs0R8banrKXEOZV5M1UNdIGYhyRLivL9gydE=

Nice! :+1: to merge.

Nice! :+1: to merge.

rebased

Pull-Request has been merged by mjia

It should really just default to using the default service principal in the keytab, with an option to use a different principal in case the keytab has keys for multiple principals for some reason.

Yeah, we could have a new configuration for this, something like:
KRB_AUTH_PRINCIPAL = 'HTTP/hostname@EXMAPLE.COM'
Then we do not need to call getServerPrincipalDetails here.

Metadata