Skip to main content

Kerberos plugin for repoze.who

Project description

Introduction

This is a repoze.who plugin for automated authentication via Kerberos (incl. Windows Active Directory). You can use this plugin to authenticate your Windows Active Directory users automatically without entering a username or password (single sign on). In combination with repoze.who.plugins.ldap you can also use the user attributes (fullname, email, etc.) from your Active Directory.

This plugin works on Windows and linux. On linux it does not work out of the box. You need a proper HTTP service principal in your kerberos configuration to use it.

Example

There is a demo application to help you get started. The configuration is in the who_activedirectory.ini file.

$ hg clone https://bitbucket.org/domruf/repoze.who.plugins.kerberos
$ cd repoze.who.plugins.kerberos
$ python setup.py install
$ paster serve demo.ini

Project details


Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring DigiCert DigiCert EV certificate Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page