{ "info": { "author": "Apple Inc.", "author_email": "calendarserver-dev@lists.macosforge.org", "bugtrack_url": null, "classifiers": [ "Development Status :: 5 - Production/Stable", "Intended Audience :: Developers", "License :: OSI Approved :: Apache Software License", "Operating System :: OS Independent", "Programming Language :: Python :: 2", "Programming Language :: Python :: 3", "Topic :: Software Development :: Libraries :: Python Modules", "Topic :: System :: Systems Administration :: Authentication/Directory" ], "description": "PyKerberos Package\n==================\n\n.. image:: https://travis-ci.org/apple/ccs-pykerberos.svg?branch=master\n :target: https://travis-ci.org/apple/ccs-pykerberos\n\nThis Python package is a high-level wrapper for Kerberos (GSSAPI)\noperations. The goal is to avoid having to build a module that wraps\nthe entire Kerberos.framework, and instead offer a limited set of\nfunctions that do what is needed for client/server Kerberos\nauthentication based on .\n\nMuch of the C-code here is adapted from Apache's mod_auth_kerb-5.0rc7.\n\n\nBuild\n=====\n\nIn this directory, run:\n\n python setup.py build\n\n\nTesting\n=======\n\nTo run the tests in the tests folder, you must have a valid Kerberos setup on\nthe test machine. You can use the script .travis.sh as quick and easy way to\nsetup a Kerberos KDC and Apache web endpoint that can be used for the tests.\nOtherwise you can also run the following to run a self contained Docker\ncontainer\n\n.. code-block: bash\n\n docker run \\\n -v $(pwd):/app \\\n -w /app \\\n -e PYENV=2.7.13 \\\n -e KERBEROS_USERNAME=administrator \\\n -e KERBEROS_PASSWORD=Password01 \\\n -e KERBEROS_REALM=example.com \\\n -e KERBEROS_PORT=80 \\\n ubuntu:16.04 \\\n /bin/bash .travis.sh\n\nThe docker command needs to be run in the same directory as this library and\nyou can test it with different Python versions by changing the value of the\nPYENV environment value set in the command.\n\nPlease have a look at testing_notes.md for more information.\n\n\nIMPORTANT\n=========\n\nThe checkPassword method provided by this library is meant only for testing purposes as it does\nnot offer any protection against possible KDC spoofing. That method should not be used in any\nproduction code.\n\n\nChannel Bindings\n================\n\nYou can use this library to authenticate with Channel Binding support. Channel\nBindings are tags that identify the particular data channel being used with the\nauthentication. You can use Channel bindings to offer more proof of a valid\nidentity. Some services like Microsoft's Extended Protection can enforce\nChannel Binding support on authorisation and you can use this library to meet\nthose requirements.\n\nMore details on Channel Bindings as set through the GSSAPI can be found here\n. Using\nTLS as a example this is how you would add Channel Binding support to your\nauthentication mechanism. The following code snippet is based on RFC5929\n using the 'tls-server-endpoint-point'\ntype.\n\n.. code-block:: python\n\n import hashlib\n\n def get_channel_bindings_application_data(socket):\n # This is a highly simplified example, there are other use cases\n # where you might need to use different hash types or get a socket\n # object somehow.\n server_certificate = socket.getpeercert(True)\n certificate_hash = hashlib.sha256(server_certificate).hexdigest().upper()\n certificate_digest = base64.b16decode(certificate_hash)\n application_data = b'tls-server-end-point:%s' % certificate_digest\n\n return application_data\n\n def main():\n # Code to setup a socket with the server\n # A lot of code to setup the handshake and start the auth process\n socket = getsocketsomehow()\n\n # Connect to the host and start the auth process\n\n # Build the channel bindings object\n application_data = get_channel_bindings_application_data(socket)\n channel_bindings = kerberos.channelBindings(application_data=application_data)\n\n # More work to get responses from the server\n\n result, context = kerberos.authGSSClientInit(kerb_spn, gssflags=gssflags, principal=principal)\n\n # Pass through the channel_bindings object as created in the kerberos.channelBindings method\n result = kerberos.authGSSClientStep(context, neg_resp_value, channel_bindings=channel_bindings)\n\n # Repeat as necessary\n\n\nPython APIs\n===========\n\nSee kerberos.py.\n\n\nCopyright and License\n=====================\n\nCopyright (c) 2006-2018 Apple Inc. All rights reserved.\n\nThis software is licensed under the Apache License, Version 2.0. The\nApache License is a well-established open source license, enabling\ncollaborative open source software development.\n\nSee the \"LICENSE\" file for the full text of the license terms.", "description_content_type": null, "docs_url": null, "download_url": "", "downloads": { "last_day": -1, "last_month": -1, "last_week": -1 }, "home_page": "https://github.com/apple/ccs-pykerberos", "keywords": "", "license": "Apache License, Version 2.0", "maintainer": "", "maintainer_email": "", "name": "kerberos", "package_url": "https://pypi.org/project/kerberos/", "platform": "all", "project_url": "https://pypi.org/project/kerberos/", "project_urls": { "Homepage": "https://github.com/apple/ccs-pykerberos" }, "release_url": "https://pypi.org/project/kerberos/1.3.0/", "requires_dist": null, "requires_python": "", "summary": "Kerberos high-level interface", "version": "1.3.0" }, "last_serial": 3652551, "releases": { "1.1.1": [ { "comment_text": "", "digests": { "md5": "09ff604748b8c32dc9698e714f32b8a5", "sha256": "09132e3b2027854e8714894546aff11f31e6051eb75513e774948e10a5dde6f5" }, "downloads": -1, "filename": "kerberos-1.1.1.tar.gz", "has_sig": false, "md5_digest": "09ff604748b8c32dc9698e714f32b8a5", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 15343, "upload_time": "2011-04-27T22:19:11", "url": "https://files.pythonhosted.org/packages/6d/cc/9ca8bcd1483cb0d7436c6df01b48003b7fa0743cf722194f6c54d7a6507f/kerberos-1.1.1.tar.gz" } ], "1.1.2": [ { "comment_text": "", "digests": { "md5": "d341a1f424aeba44580d717628522b9a", "sha256": "81799e4d97672ffa89631f64750d24d3bbd7d767aec8a888e02fd688a5eef0a9" }, "downloads": -1, "filename": "kerberos-1.1.2.tar.gz", "has_sig": false, "md5_digest": "d341a1f424aeba44580d717628522b9a", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 10430, "upload_time": "2015-03-17T22:44:11", "url": "https://files.pythonhosted.org/packages/41/b9/cd13b0a7d0dc50735b6f4d743e7b425bc4aa8b44f6e7f896f853207db159/kerberos-1.1.2.tar.gz" } ], "1.2.0": [], "1.2.2": [ { "comment_text": "", "digests": { "md5": "b209a0cc9a25a99bcbd9be7327bdba8c", "sha256": "070ff6d9baf3752323283b1c8ed75e2edd0ec55337359185abf5bb0b617d2f5d" }, "downloads": -1, "filename": "kerberos-1.2.2.tar.gz", "has_sig": false, "md5_digest": "b209a0cc9a25a99bcbd9be7327bdba8c", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 18890, "upload_time": "2015-03-27T01:15:30", "url": "https://files.pythonhosted.org/packages/dc/bd/1f0316431ba3b0d4937054718972cdd97c941fd88d071fa976fae79758d1/kerberos-1.2.2.tar.gz" } ], "1.2.3": [ { "comment_text": "", "digests": { "md5": "c04089d11877a40a48df6ae535a8e894", "sha256": "963b97c06bf22ea10afd286513064e8b90d83aa0f208d4717004c28fb23a55a9" }, "downloads": -1, "filename": "kerberos-1.2.3.tar.gz", "has_sig": false, "md5_digest": "c04089d11877a40a48df6ae535a8e894", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 12935, "upload_time": "2016-01-19T18:04:57", "url": "https://files.pythonhosted.org/packages/42/62/402f7e0a68f8e8de16f22ed3625d058b494def8078c68c576eef5461c118/kerberos-1.2.3.tar.gz" } ], "1.2.4": [ { "comment_text": "", "digests": { "md5": "e3e01fa62af5f21cb3e8b033a0291443", "sha256": "d6f49923bbcf4ebc47ae47b7ceac7866543200669e1dfb24821221da3e940987" }, "downloads": -1, "filename": "kerberos-1.2.4.tar.gz", "has_sig": false, "md5_digest": "e3e01fa62af5f21cb3e8b033a0291443", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 19615, "upload_time": "2016-01-25T17:56:20", "url": "https://files.pythonhosted.org/packages/4c/74/6f79a30b539b9debff34f697ff2a770aca51c89a98bf5c242b2ec3ec2b9f/kerberos-1.2.4.tar.gz" } ], "1.2.5": [ { "comment_text": "", "digests": { "md5": "0df306b6bc0806bc480d4c282229d6ba", "sha256": "b32ae66b1da2938a2ae68f83d67ce41b5c5e3b6c731407104cd209ba426dadfe" }, "downloads": -1, "filename": "kerberos-1.2.5.tar.gz", "has_sig": false, "md5_digest": "0df306b6bc0806bc480d4c282229d6ba", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 16070, "upload_time": "2016-07-18T19:18:21", "url": "https://files.pythonhosted.org/packages/46/73/1e7520780a50c9470aeba2b3c020981201c8662b618fb2889a3e3dc2aeed/kerberos-1.2.5.tar.gz" } ], "1.3.0": [ { "comment_text": "", "digests": { "md5": "86955abd72703efe82dd4b7d5a45e21a", "sha256": "f039b7dd4746df56f6102097b3dc250fe0078be75130b9dc4211a85a3b1ec6a4" }, "downloads": -1, "filename": "kerberos-1.3.0.tar.gz", "has_sig": false, "md5_digest": "86955abd72703efe82dd4b7d5a45e21a", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 19402, "upload_time": "2018-03-08T21:56:44", "url": "https://files.pythonhosted.org/packages/34/18/9c86fdfdb27e0f7437b7d5a9e22975dcc382637b2a68baac07843be512fc/kerberos-1.3.0.tar.gz" } ] }, "urls": [ { "comment_text": "", "digests": { "md5": "86955abd72703efe82dd4b7d5a45e21a", "sha256": "f039b7dd4746df56f6102097b3dc250fe0078be75130b9dc4211a85a3b1ec6a4" }, "downloads": -1, "filename": "kerberos-1.3.0.tar.gz", "has_sig": false, "md5_digest": "86955abd72703efe82dd4b7d5a45e21a", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 19402, "upload_time": "2018-03-08T21:56:44", "url": "https://files.pythonhosted.org/packages/34/18/9c86fdfdb27e0f7437b7d5a9e22975dcc382637b2a68baac07843be512fc/kerberos-1.3.0.tar.gz" } ] }