lexmount-extra 0.1.0

Extra utilities for Lexmount Python SDK projects.

lexmount-extra

Extra utilities for Lexmount Python SDK projects.

Install

pip install lexmount-extra

The package uses ntlm-auth for explicit NTLM credentials and pyspnego[kerberos] for SPNEGO/Kerberos and Windows integrated NTLM.

Usage

from lexmount_extra import (
    createKerberosAuthCallback,
    createNTLMAuthCallback,
    generateKerberosToken,
    generateNTLMChallengeToken,
    generateNTLMResponseToken,
)

type1_token = generateNTLMChallengeToken("web.lab.local", "LAB")

type3_token = generateNTLMResponseToken(
    "http://web.lab.local/",
    "web.lab.local",
    "LAB",
    "NTLM <server-type2-token>",
    "alice",
    "P@ssw0rd123!",
)

kerberos_token = generateKerberosToken(
    "[e-mail]",
    "server-token",
)

Pythonic snake_case aliases are available for every Node-compatible camelCase function.

Lexmount authentication callbacks

from lexmount import register_integrated_auth_callback
from lexmount_extra import createKerberosAuthCallback, createNTLMAuthCallback

ntlm_auth = createNTLMAuthCallback({
    "hostname": "web.lab.local",
    "domain": "LAB",
})

kerberos_auth = createKerberosAuthCallback({
    "hostname": "web.lab.test",
})

register_integrated_auth_callback(session, ntlm_auth)
register_integrated_auth_callback(session, kerberos_auth)

Both callback factories can be called without options. NTLM defaults to USERDNSDOMAIN and USERDOMAIN when those environment variables exist. Kerberos derives the HTTP@host service principal from the authentication challenge origin when neither spn nor hostname is provided.

NTLM integrated authentication

When generateNTLMResponseToken is called without username and password, Windows uses the current logon session through SSPI via pyspnego. Non-Windows platforms return an empty token in the no-credential path, matching the Node package.