teach/adlin
Archived
0
0
Fork 0
Code Issues 1 Pull requests 4 Releases Activity

Support krb5 authentication

Browse source
This commit is contained in:
nemunaire 2021-02-04 18:37:22 +01:00
commit 54555dcca4
4 changed files with 129 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
pkg/login-validator/cmd/main.go
View file

@ -24,10 +24,12 @@ func main() {
flag.StringVar(&tftpDir, "tftpdir", "/var/tftp/", "Path to TFTPd directory")
flag.StringVar(&loginSalt, "loginsalt", "adelina", "secret used in login HMAC")
var auth = flag.String("auth", "none", "Auth method: none, ldap, fwd")
var auth = flag.String("auth", "none", "Auth method: none, fwd, ldap, krb5")
var fwdURI = flag.String("fwduri", "https://srs.epita.fr:443/", "URI to forward auth requests")
var krb5Realm = flag.String("krb5realm", "CRI.EPITA.FR", "Kerberos Realm")
var ldapAddr = flag.String("ldaphost", "auth.cri.epita.fr", "LDAP host")
var ldapPort = flag.Int("ldapport", 636, "LDAP port")
var ldaptls = flag.Bool("ldaptls", false, "Is LDAP connection LDAPS?")
@ -56,6 +58,11 @@ func main() {
BindUsername: *ldapbindusername,
BindPassword: *ldapbindpassword,
}
} else if auth != nil && *auth == "krb5" && krb5Realm != nil {
log.Printf("Auth method: KRB5(%s)", *krb5Realm)
lc.authMethod = &Krb5Auth{
Realm: *krb5Realm,
}
} else if auth != nil && *auth == "fwd" && fwdURI != nil {
if uri, err := url.Parse(*fwdURI); err != nil {
log.Fatal("Unable to parse FWD URL:", err)