Python SPNEGO Library

Library to handle SPNEGO (Negotiate, NTLM, Kerberos) and CredSSP authentication. Also includes a packet parser that can be used to decode raw NTLM/SPNEGO/Kerberos tokens into a human readable format.

Requirements

See How to Install for more details

CPython 3.9+
cryptography
sspilib - Windows only

Optional Requirements

The following Python libraries can be installed to add extra features that do not come with the base package:

python-gssapi and pykrb5 for Kerberos authentication on Linux
ruamel.yaml for YAML output support on pyspnego-parse

How to Install

To install pyspnego with all basic features, run

pip install pyspnego

Kerberos Authentication

While pyspnego supports Kerberos authentication on Linux, it isn't included by default due to its reliance on system packages to be present.

To install these packages, run the below

# Debian/Ubuntu
apt-get install gcc python3-dev libkrb5-dev

# Centos/RHEL/Fedora
dnf install gcc python-devel krb5-devel

# Arch Linux
pacman -S gcc krb5

Once installed you can install the Python packages with

pip install pyspnego[kerberos]

Kerberos also needs to be configured to talk to the domain but that is outside the scope of this page.

How to Use

See the examples section for examples on how to use the authentication side of the library.

Note: While server/acceptor authentication is available for all protocols it is highly recommended you have the system GSSAPI and NTLM system libraries present for acceptor authentication. Pyspnego NTLM acceptor authentication should work but it is not as thoroughly tested as the GSSAPI implementation.

CredSSP Authentication

Since version 0.2.0, pyspnego can be used for CredSSP authentication. While this isn't part of the SPNEGO/Negotiate protocol it uses common features and code like ASN.1 structures and even Negotiate auth as part of the CredSSP process. Both initiate and accept usages are supported when specifying protocol='credssp' but there are no guarantees the acceptor is free of any bugs so use with caution.

Backlog

Add support for anonymous authentication
See if pywinrm wants to use this

Metadata

Release files for pyspnego 0.12.4

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pyspnego 0.12.4
File	Size	Uploaded
pyspnego-0.12.4.tar.gz	235.4 kB	Oct 6, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for pyspnego 0.12.4
File	Interpreter	ABI	Platform	Reset
pyspnego-0.12.4-py3-none-any.whl 131.0 kB Oct 6, 2026	Python 3	none	any	Details

Total release size: 366.4 kB

Release files / pyspnego-0.12.4.tar.gz

Download URL	pyspnego-0.12.4.tar.gz
Size	235.4 kB
Tags	Source
SHA-256 checksum How to use checksums	`acb314d6ca5c9ce87994b1eebbe2d8b687e0d564f9d650b306afb4c8f9c2ffd5`
BLAKE2b-256 checksum How to use checksums	`4b58d7c9cfdf1394a8b4d85ac488888814b28d26c4bd732191bd4169687cbfdd`
Upload date	Oct 6, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/jborean93/pyspnego
Publishing commit: github.com/jborean93/pyspnego/tree/133ec0005ed156b544ebf7bfdee93e08aefcc1b4

Workflow

Publishing configuration: github.com/jborean93/pyspnego/blob/133ec0005ed156b544ebf7bfdee93e08aefcc1b4/.github/workflows/ci.yml
Publishing logs: github.com/jborean93/pyspnego/actions/runs/37410188884/attempts/1

Artifact

Subject: pyspnego-0.12.4.tar.gz
SHA-256 checksum: acb314d6ca5c9ce87994b1eebbe2d8b687e0d564f9d650b306afb4c8f9c2ffd5 Verifying attestations

Release files / pyspnego-0.12.4-py3-none-any.whl

Download URL	pyspnego-0.12.4-py3-none-any.whl
Size	131.0 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`a29a34de1abe9e9b30d9aa1d363f8e49fc159eb7355b1f2ee86ccb3a2ce3bba9`
BLAKE2b-256 checksum How to use checksums	`eb4ef6c1bb147890f246c3a24ce836be4f6cfc44fd7be08e0a229e3a1c08b560`
Upload date	Oct 6, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/jborean93/pyspnego
Publishing commit: github.com/jborean93/pyspnego/tree/133ec0005ed156b544ebf7bfdee93e08aefcc1b4

Workflow

Publishing configuration: github.com/jborean93/pyspnego/blob/133ec0005ed156b544ebf7bfdee93e08aefcc1b4/.github/workflows/ci.yml
Publishing logs: github.com/jborean93/pyspnego/actions/runs/37410188884/attempts/1

Artifact

Subject: pyspnego-0.12.4-py3-none-any.whl
SHA-256 checksum: a29a34de1abe9e9b30d9aa1d363f8e49fc159eb7355b1f2ee86ccb3a2ce3bba9 Verifying attestations