kdcproxy

kdcproxy copied to clipboard

Request filtering by principal names

6

Hello, is it possible to inspect the KRB ticket request and allow only configured ticket request? E.g. - TGT and service tickets for only one principal or - only for...

meikestone

libkrb5 does it on its own normally and is influenced by locator plugins. kdcproxy should just follow suite.

simo5

kdcproxy has no test cases for AS-REQ with anon pkinit and pkinit. FreeIPA 4.5 will use anon PKINIT to establish a FAST channel for OTP.

tiran

When running kdcproxy in mod_wsgi, it is unclear from which component error messages come from. For example: mod_wsgi.c(): [client WARNING:root:Connection broken while writing (...)

fcami

There is a typo around line 194 of kdcproxy/__init__.py: `logging.warning("Conection broken while writing (%s)", e) `

fcami

Add Docker support for easier deployments

2

alfonsrv

plans to release 1.1.0 on PyPI?

3

`1.1.0` is released on github: https://github.com/latchset/kdcproxy/releases/tag/v1.1.0 but it's not released on PyPI: https://pypi.org/project/kdcproxy/

stanislavlevin