Re: [ANNOUNCE] python-ad

[<mi...@st...>]

Geert Jansen wrote:
> Michael Ströder wrote:
> 
>> I saw that kinit is started as a shell sub-process.
> 
> Actually Python-AD comes with a C module that wraps the required
> Kerberos functions (see lib/ad/protocol/krb5.c). What you probably saw
> is the use of kinit in the test suite, where I use it to verify the
> credentials acquired by the C module.

Ah, ok. Interesting. Why don't you separate the krb5 module into another
project. I guess some people might be interested in that.

Especially my dream would be to support HTTP-Authentication based on
SPNEGO/GSSAPI in web2ldap. But not only authenticating the user at the
web server. I would rather like forward the service ticket requested for
a particular LDAP service to the LDAP server in a SASL/GSSAPI
BindRequest. Do you think that's feasible?

Ciao, Michael.