How to get Kerberos token for proxy authentication

Thomas Kula kula at tproa.net
Thu Mar 21 11:24:09 EDT 2024


On Wed, Mar 20, 2024 at 11:33:16AM -0400, Ken Hornstein via Kerberos wrote:
> >Thanks again Ken.  My application is written in Go. So I'm looking
> >for Kerberos implementation that can be easily integrated with my
> >application. Hence I  was considering MIT Kerberos and using C bindings
> >to call those APIs from my Go code.  "MacOS X it might be easier to use
> >the native GSSAPI implementation which would be Heimdal"
> >
> >Here did you mean developer.apple.com/documentation/gss ? Isn't that in
> >Swift ? I will explore libcurl code thank-you.
> 
> I can't speak for the Swift API, but Heimdal on MacOS X also provides a
> standard C API for the GSSAPI functions.  I don't have much experience
> with Go but if you can call C functions from within it (and I have to
> believe that is possible) then doing so for Heimdal should be fine.
> There might be a few differences in term of what GSSAPI extension
> functions are available but from what you describe you should only need
> the standard GSSAPI functions.

Are you familiar with https://github.com/jcmturner/gokrb5? I've used it
in the past with some experiments in some Go code I was working on, I
wasn't touching GSSAPI but there's at least some GSSAPI code in there.
Might be worth checking out as it's native Go code, no cgo wrapping.

-- 
Thomas L. Kula | kula at tproa.net | https://kula.tproa.net/


More information about the Kerberos mailing list