How to get Kerberos token for proxy authentication

Ken Hornstein kenh at cmf.nrl.navy.mil
Sun Mar 17 20:11:40 EDT 2024


>Hi, I have a requirement to authenticate my application
>(Golang)  against a proxy server which requires Kerberos
>authentication.  I have achieved this on Windows using
>github/alexbrainman/sspi Golang package.From that package I
>basically call  negotiate.AcquireCurrentUserCredentials() and
>negotiate.NewClientContext() to get the client token which gets passed
>to the proxy server in Proxy-Authorization header.  I want to achieve
>the same on macOS and looking for suitable libraries.  Can I use MIT
>Kerberos library for this purpose ?what are the APIs equivalent to get
>client token without prompting the user for password ? The user would
>have acquired Kerberos ticket on sign-in as a domain user.

I believe you would want to use the GSSAPI for this.  If your header
looks like:

Proxy-Authorization: Negotiate <base64 encoded data>

Then definitely you want to use that.  You could use libcurl as example
code if you wanted to see what this would look like.

--Ken


More information about the Kerberos mailing list