README.txt 2.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869
  1. =========================================================
  2. PyKerberos Package
  3. Copyright (c) 2006-2008 Apple Inc. All rights reserved.
  4. Licensed under the Apache License, Version 2.0 (the "License");
  5. you may not use this file except in compliance with the License.
  6. You may obtain a copy of the License at
  7. http://www.apache.org/licenses/LICENSE-2.0
  8. Unless required by applicable law or agreed to in writing, software
  9. distributed under the License is distributed on an "AS IS" BASIS,
  10. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  11. See the License for the specific language governing permissions and
  12. limitations under the License.
  13. =========================================================
  14. This Python package is a high-level wrapper for Kerberos (GSSAPI) operations.
  15. The goal is to avoid having to build a module that wraps the entire Kerberos.framework,
  16. and instead offer a limited set of functions that do what is needed for client/server
  17. Kerberos authentication based on <http://www.ietf.org/rfc/rfc4559.txt>.
  18. Much of the C-code here is adapted from Apache's mod_auth_kerb-5.0rc7.
  19. ========
  20. CONTENTS
  21. ========
  22. src/ : directory in which C source code resides.
  23. setup.py : Python distutils extension build script.
  24. config/ : directory of useful Kerberos config files.
  25. edu.mit.Kerberos : example Kerberos .ini file.
  26. README.txt : this file!
  27. kerberos.py : Python api documentation/stub implementation.
  28. =====
  29. BUILD
  30. =====
  31. In this directory, run:
  32. python setup.py build
  33. =======
  34. TESTING
  35. =======
  36. You must have a valid Kerberos setup on the test machine and you should ensure that you have valid
  37. Kerberos tickets for any client authentication being done (run 'klist' on the command line).
  38. Additionally, for the server: it must have been configured as a valid Kerberos service with the Kerbersos server
  39. for its realm - this usually requires running kadmin on the server machine to add the principal and generate a keytab
  40. entry for it (run 'sudo klist -k' to see the currently available keytab entries).
  41. Make sure that PYTHONPATH includes the appropriate build/lib.xxxx directory.
  42. Then run test.py with suitable command line arguments:
  43. python test.py -u userid -p password -s service
  44. -u : user id for basic authenticate
  45. -p : password for basic authenticate
  46. -s : service principal for GSSAPI authentication (defaults to 'http@host.example.com')
  47. ===========
  48. Python APIs
  49. ===========
  50. See kerberos.py.