[Calypso] [PATCH 3/3] Add GSSAPI/Kerberos authentication via Negotiate

Jelmer Vernooij jelmer at jelmer.uk
Sat Apr 9 11:07:08 PDT 2016


On Sat, Apr 09, 2016 at 12:42:40AM +0200, Guido G√ľnther wrote:
> When the service name is set via the servicename config option and
> pykerberos is installed allow authentication via the negotiate header.
> 
> Since this is not using basic auth and its on top of all other
> authenciation schemes its not implemented as an acl module. This will
> also allow us to make the whole negotiate auth be connection based in
> the future.
> 
> The current code results in the user being "user at REALM" so in case of
> using "acl.personal=True" the directories need to be name like this as
> well so we want to add a user to principal mapping at one point.

LGTM

Jelmer


More information about the Calypso mailing list