Django GSSAPI SPNEGO
Project description
A Django application for adding Kerberos/GSS authentication to your existing backend
This Django application provides some View and Mixin classes along with a backend Mixin class to extend your existing AuthenticationBackend with SPNEGO-based authentication.
Prereqs
A working Kerberos KDC (MIT, Windows AD, Heimdall, whatever)
A SPN for your application server(s)
A method for mapping Kerberos Principals to User objects in your backend
Configuration
The following settings must be present:
django_gss_spnego in settings.INSTALLED_APPS
settings.KERBEROS_SPN may be set to SERVICENAME@HOSTNAME ie HTTP@django-server. Setting it to “” means “try all SPNs in the host keytab”
Environment variables to control your KRB5 installation. See the kerberos env documentation for details.
Usage
Mix django_gss_spnego.backends.SpnegoBackendMixin into your backend class(es) of choice. Ensure those backends can resolve a User object from a kerberos principal name.
from django_auth_ldap.backend import LDAPBackend
from django_gss_spnego.backends import SpnegoBackendMixin
class MyBackendClass(SpnegoBackendMixin, LDAPBackend):
def get_user_from_username(self, username):
return self.populate_user(username)
Register aforementioned backend class in settings.AUTHENTICATION_BACKENDS
Create a view somewhere on your site that uses SpnegoAuthMixin, and add it to your URL router. If using one of the provided CBV View classes, also include django_gss_spnego and django.contrib.admin in your settings.INSTALLED_APPS for access to the spnego.html template.
from django_gss_spnego.views import SpnegoView
urls.append(r"^auth/spnego$", SpnegoView.as_view(), name="spnego")
Acquire a ticket, and point your favorite supported client at the endpoint
import requests_gssapi
import requests
auth = requests_gssapi.HTTPSPNEGOAuth()
sess = requests.session()
sess.auth = auth
sess.get("http://localhost/auth/spnego")
sess.get("http://localhost/page/that/requires/authorized_user")
Acknowledgements
Matt Magin (AzMoo) for writing a similar Middleware
License
Apache 2.0 – see the LICENSE file for more detail
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Hashes for django-gss-spnego-19.2.0.dev0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | e04bd5a2b540551f5fce48662a3ce3bd5ff1821d4ff21c46674d0c3467fccbb2 |
|
MD5 | 0a3772e5737c26d9738428b9cd193939 |
|
BLAKE2b-256 | 29108c1387f237ea59631392b5560f6c8de0ac8d47ead6b93a323411ce56e300 |