36 lines
1.1 KiB
Plaintext
36 lines
1.1 KiB
Plaintext
Authentic2 Auth Kerberos
|
|
==========================
|
|
|
|
It provides basic implementation of the HTTP Negotiate authentication mechanism
|
|
and autologin support using Javascript and a cookie.
|
|
|
|
The django-kerberos_ project is used as a basis for this plugin.
|
|
|
|
Install
|
|
-------
|
|
|
|
You just have to install the package in your virtualenv and relaunch, it will
|
|
be automatically loaded by authentic2.
|
|
|
|
You must define the KRB5_KTNAME environment to the path of a keytab file
|
|
containing the key for your service principal. See django-kerberos_
|
|
documentation for details.
|
|
|
|
Settings
|
|
--------
|
|
|
|
- A2_AUTH_KERBEROS_ENABLED: enable the authentication module, default is True.
|
|
- A2_AUTH_KERBEROS_CREATE_USER: whether to create users for Kerberos
|
|
principals, default is True.
|
|
- A2_AUTH_KERBEROS_REALM: default reaml to attribute to user, default is None.
|
|
If not None, the Kerberos realm is replaced by this one. It's incompatible
|
|
with support for multiple realms.
|
|
|
|
.. _django-kerberos: https://pypi.python.org/pypi/django-kerberos
|
|
|
|
Roadmap
|
|
-------
|
|
|
|
- LDAP support (think AD support)
|
|
- Linking Kerberos principals to existing users
|