mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 01:41:14 -06:00
993f76fe60
- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication - Update tools to use kerberos - Add User class
56 lines
1.7 KiB
Python
56 lines
1.7 KiB
Python
#! /usr/bin/python -E
|
|
# Authors: Rob Crittenden <rcritten@redhat.com>
|
|
#
|
|
# Copyright (C) 2007 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License as
|
|
# published by the Free Software Foundation; version 2 or later
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
#
|
|
|
|
#!/usr/bin/python
|
|
|
|
import httplib
|
|
import xmlrpclib
|
|
import kerberos
|
|
from kerberos import GSSError
|
|
|
|
class KerbTransport(xmlrpclib.Transport):
|
|
"""Handles Kerberos Negotiation authentication to an XML-RPC server."""
|
|
|
|
def get_host_info(self, host):
|
|
|
|
host, extra_headers, x509 = xmlrpclib.Transport.get_host_info(self, host)
|
|
|
|
# Set the remote host principal
|
|
h = host
|
|
hostinfo = h.split(':')
|
|
service = "HTTP@" + hostinfo[0]
|
|
|
|
try:
|
|
rc, vc = kerberos.authGSSClientInit(service);
|
|
except kerberos.GSSError, e:
|
|
raise GSSError(e)
|
|
|
|
try:
|
|
kerberos.authGSSClientStep(vc, "");
|
|
except kerberos.GSSError, e:
|
|
raise GSSError(e)
|
|
|
|
extra_headers = [
|
|
("Authorization", "negotiate %s" % kerberos.authGSSClientResponse(vc) )
|
|
]
|
|
|
|
return host, extra_headers, x509
|
|
|