开源软件名称: jcmturner/gokrb5开源软件地址: https://github.com/jcmturner/gokrb5开源编程语言:
Go
100.0%
开源软件介绍: gokrb5
It is recommended to use the latest version:
Development will be focused on the latest major version. New features will only be targeted at this version.
Versions
Dependency Management
Import Path
Usage
Godoc
Go Report Card
Go modules
import "github.com/jcmturner/gokrb5/v8/{sub-package}"
gopkg.in
import "gopkg.in/jcmturner/gokrb5.v7/{sub-package}"
Go Version Support
gokrb5 may work with other versions of Go but they are not formally tested.
It has been reported that gokrb5 also works with the gollvm compiler but this is not formally tested.
Features
Pure Go - no dependency on external libraries
No platform specific code
Server Side
HTTP handler wrapper implements SPNEGO Kerberos authentication
HTTP handler wrapper decodes Microsoft AD PAC authorization data
Client Side
Client that can authenticate to an SPNEGO Kerberos authenticated web service
Ability to change client's password
General
Kerberos libraries for custom integration
Parsing Keytab files
Parsing krb5.conf files
Parsing client credentials cache files such as /tmp/krb5cc_$(id -u $(whoami))
Implemented Encryption & Checksum Types
Implementation
Encryption ID
Checksum ID
RFC
des3-cbc-sha1-kd
16
12
3961
aes128-cts-hmac-sha1-96
17
15
3962
aes256-cts-hmac-sha1-96
18
16
3962
aes128-cts-hmac-sha256-128
19
19
8009
aes256-cts-hmac-sha384-192
20
20
8009
rc4-hmac
23
-138
4757
The following is working/tested:
Tested against MIT KDC (1.6.3 is the oldest version tested against) and Microsoft Active Directory (Windows 2008 R2)
Tested against a KDC that supports PA-FX-FAST.
Tested against users that have pre-authentication required using PA-ENC-TIMESTAMP.
Microsoft PAC Authorization Data is processed and exposed in the HTTP request context. Available if Microsoft Active Directory is used as the KDC.
Contributing
If you are interested in contributing to gokrb5, great! Please read the contribution guidelines .
References
Useful Links
Thanks
Greg Hudson from the MIT Consortium for Kerberos and Internet Trust for providing useful advice.
Contributing
Thank you for your interest in contributing to gokrb5 please read the
contribution guide as it should help you get started.
Known Issues
请发表评论