Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Landru! Guide us! -- A Beta 3-oid, "The Return of the Archons", stardate 3157.4


devel / comp.protocols.kerberos / How to get Kerberos token for proxy authentication

SubjectAuthor
o How to get Kerberos token for proxy authenticationmanju k

1
How to get Kerberos token for proxy authentication

<mailman.63.1710654016.2322.kerberos@mit.edu>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=515&group=comp.protocols.kerberos#515

 copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: m_a_n_j_...@yahoo.com (manju k)
Newsgroups: comp.protocols.kerberos
Subject: How to get Kerberos token for proxy authentication
Date: Sun, 17 Mar 2024 05:37:46 +0000 (UTC)
Organization: TNet Consulting
Lines: 18
Message-ID: <mailman.63.1710654016.2322.kerberos@mit.edu>
References: <1182031369.5745575.1710653866918.ref@mail.yahoo.com>
<1182031369.5745575.1710653866918@mail.yahoo.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="2078"; mail-complaints-to="newsmaster@tnetconsulting.net"
To: "kerberos@mit.edu" <kerberos@mit.edu>
DKIM-Filter: OpenDKIM Filter v2.11.0 unknown-host (unknown-jobid)
Authentication-Results: mailman.mit.edu;
dkim=pass (1024-bit key, unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=oj7sWSsk;
dkim=pass (2048-bit key,
unprotected) header.d=yahoo.com header.i=@yahoo.com header.a=rsa-sha256
header.s=s2048 header.b=Rgb0/Vwg
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=aD7e4k8KQRNRd/Rw5yw3XBE7OlI40MtwuWy4ywQkuA/KPq21R9RDRJLRPyE9orvs77r9CVDQM7kGyFfMWDiOEXJ9E+ugrM8hZM28gFvQbmXMOv+AuHsaN9DRF5Iz3kBNYzOarHEdDFawLthNHufpeNRvmShT+lT3OYXFM4UG99nGB/FHzpB2wi7256wdgbJ+NBCwLqaUXUY4Enao6Zw2v0gRkZy+YCB7Fg4HUwAiVWEtJXznDrWA7f12hDiwuygl+NjL/BWPv6aerXcNfLlgw8r+DdI2wGqEOXSKxqMgtks/Nm9w8j0x8BgCtgw0dEHaJjGMOTilKL0Acjk4dmRmmg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=P/M73LIC1xbW5TnrYSJO8WOH2cVrnyZa2XnDoDf7+hA=;
b=kFaHeLKkmFB2UrqCfqxkIO1ZR5EiDNhPZXRLgD8YEGRXn2GeciPCMpKPjHXj4tqYEZjOPytNgVJnThn1aBcNUOaNgmPx2U8mfuoG9Kg2qewwCOp0WC409jXkd2JEIds7S0m0+EgZzyYc9xqCvPsfybGEo+bvGRV1GbFNvBuWBbrT6WnTlwsIQUcyAm5rNJPHF2z9pdOLutB3xV2qyagky2ZCBlzyFWkTV18R8Lyrpyaz3YQpn1bWzpfy9Gwr7liO+G2k5fK5FAOSw0Q7+cVNosC9P/qDL+7G9qBl4gCAzRZmU1EktTxCMMNgCJuJ4iU0dWOe0z0XBvC7bVEiXfPhxQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
66.163.188.110) smtp.rcpttodomain=mit.edu smtp.mailfrom=yahoo.com; dmarc=pass
(p=reject sp=reject pct=100) action=none header.from=yahoo.com; dkim=pass
(signature was verified) header.d=yahoo.com; arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=P/M73LIC1xbW5TnrYSJO8WOH2cVrnyZa2XnDoDf7+hA=;
b=oj7sWSskJC/DpdyuU6JPf1D2ueY4xpQ0ePm04hiufoFO7kibU+xttSwT71jm51eMWDwPaqG6a9uVwDwlI9fluDwb2eorWgWeJLOhPmNql+KZv0pD1thfDG3K3Tqt0UmKSRW6Jz5gCMj6tKmhs10hlgTY1oE8HaFzT4YZBdGEkbA=
Authentication-Results: spf=pass (sender IP is 66.163.188.110)
smtp.mailfrom=yahoo.com; dkim=pass (signature was verified)
header.d=yahoo.com;dmarc=pass action=none header.from=yahoo.com;
Received-SPF: Pass (protection.outlook.com: domain of yahoo.com designates
66.163.188.110 as permitted sender) receiver=protection.outlook.com;
client-ip=66.163.188.110; helo=sonic319-48.consmr.mail.ne1.yahoo.com; pr=C
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;
t=1710654010; bh=P/M73LIC1xbW5TnrYSJO8WOH2cVrnyZa2XnDoDf7+hA=;
h=Date:From:To:Subject:References:From:Subject:Reply-To;
b=Rgb0/VwgHV5acGE0uElw7tpdFp86IjD3Pr+dqgkFva+ogyRg6VW+48Nl8tsnK1XjyGr4zucpLA7ksvTa34Zz/g25Rq2nWgg3XH80IC4RDPG1t7sAq59CXb8OkKX3p/dOdTbv2nm2LN6adgwJcpnf7YiG4M4PiiB/1C6Z6+D1tLG0rnsxNNDkxTyLMjfwQFhOrc4GLZEQ62Ald1T5CdtmTNS4N0A60M0JXRKSDqBbYcoWMVMiHaRrrjvG43tam0KJC8UwhDDT7h6iZPf8Fm89GjgXtHEqJCszTcrn25chPJdKl/pjQ7FCGSNM3h8lni6lKlWw12ZZPJO+lZyNjZFqnw==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;
t=1710654010; bh=n2/x2aYghTwgyeMJyKHLHPC0tDV6Cqm4HS+NQhNMMOD=;
h=X-Sonic-MF:Date:From:To:Subject:From:Subject;
b=SNKjWQZEs+kxqfHSYEwvzSUHXpUcIsLcbz+o0MJsJOJITnfAeWMd0p8N9AfCmfvQKgs/p5qXXxHoMrfxMD9KmdcmX++d7LZ5RZq8+le7lEPvK/SmrY+sdrr2ezItHVvqGQbSIcrsHsY1BAUjU06TBc9OJH5sPKasjIGkuFd6jWMnIf+pVbvZk9swmPEpq86mWxWOT7iqE8iVzcNxzM+OR1Y8DBGl4VU/VurgfDf0KZZcCx8zTakaM5gc8NkwH6ZglKpb7NKg/Xmwm3UPsjTV/oAklLsBzzcM0esfcsntMsR+XLzHxkIOTMp668Dmy9IasjfcPxgxptZcFjY7dGdr8A==
X-YMail-OSG: kFzsbr0VM1klS0IiKqTflPsNUTvbhqQy1VhArUGawBaED1epm7kZw1Waj7Oje7A
eCAHmGEHEVTVWPnS8Y1wgJDeccgA.sw.Y6z6P5okjwFv0e0YehPe72JwUdq.y79zY8B4uAzK1R4Y
SboKjd5ZEgTBz78u82qN7Y.n8u0YbWSe6bL_wnmaAAb69GgWK1PehyagWhPzQTymdndKomw_5bZa
W.Vn2qyrH3VC49gdOXofSiK9ET8UGuErvWoi0cDFraZpQHMmtoG3ASVrv2jPrIiiE8dgs37jftDl
SFs8RuxPMSyI2R35mJWLQkHlxsApVJm3PprCRWhhBxsEKnIwWy_QEGdKcz9nzwo0nZXKK.YUada.
D_5HwYHj1h50yTS0tu2Un.osaTYESCQh_5UuvEGzi9V2XbNblQkQih5g2zQdutVeVyzZwjkK91tR
SK96wd7uTIArtHchyTLYuvRCI03b_tq6DahNYZx81EchNLKB6HjmsoUxTUiTKrqnxv.zNJe46Lnu
vX7DM2DP_By9KwrOfpJcJoaRcmCc.zDe7VyREWO2F0Ste7K5wGcWr9q9Y31qZFREGJfpkm1_sXX5
bG0lCvCJzWNIl2PEaF9oz0RJMWkJKVcAfc206T__a1J2sogzYTXUH4lJiO3fLUCmBQrN6VlALRut
jvvd4dnPe5SkaNZMQ4SQE1lqNRilmXMM4X.h143eVFhsihadSNn3go0OqQXkMMz_5YrpUeUHRxmq
FQnLdwvy_7Fjfp8VLLZQ8qdBlrfSw3qRFD5baevsh0_cTxTHePBKtWiz6Bj8g.Eocf.mW0jXZhgX
0ik6dh9lN6wbpyMYZxpZ9n2o4x4mObQRaEiCapt2mx50bv.oScxMkVaHh8vWRW6P3h9K16HsAJgP
29iumVAhQCWI_jNdsyOGEemZwNt5wRx8NFgscx9Jd3NeJPwsLJvO8Q_l11IAf3MPgsi1KIW0xHPy
WuaX5jgBe2vJmq9Qs5MSUYU0pknWU.2aU.rO5QxqWZSAQ.eWfMu7ARwr.FiAn4Yis3fasgP11sxT
2WXKRy6yuR_UQ8AcGsLBtXi9hfU_vDjSR2MvWsuhuJphzuqTawT1EoDXzQoAeOBRSOJ.7beHBGRi
.zFic7.TGdkoGdqjXnYogR2aERdUb0iCg82.jxZ2sFp_oRtl9fkDFGJieeNU.K0FBY8fh9fQk.c1
VpIQzQk_haTrwG7UlZMOSZc1L5W5wcHV2EIrtkDB3UtwSD_K6nzPVNQWtYWefMccA8eXPLlIx2X7
CclXgNrMb.mTYGcpahHav54IFrD8CYHN_Eh3WKM9iMNZn6MwB5BTBpOVg3hGY4lI_M4Z1QfJfALW
pqTlatteJ_osQIxo12jfO5G6mrSF2k1bfNPm5ooCBl0DzLZJ3ZUr4olhKXuILKo_KztplKT43rFN
JYjQMeuVz3C.QJ7G6byYztvXB5SFffDBlonahg.oxc8INubRlP8jNX7Nw79f9GjqVl9bt8PHFoS9
aS3u2lwLcsF8Tm.MXp9TWtTCIiHFJqT9dHtDKZAeW3BTgI_cKVFlwCOF1HqbLGlKNElE73mN5Mzf
BnY8rDcTdtTxXnAWiOztxX7TAbhF8937cdbJdb8hhylWrMARHK0eFhr3Iree4zT_wdoR9Hjbu7U5
1XsenHeioVjPYl89xLLKoQ5gtUCYCk872nnsYW.h.vyIVC098ZCOhdQ2btpyruU_N1DUJmInRCS_
2DLDM4ZsBwp5Omp3FvwFBowYrXgV2USSIi3AtkP.NBrgCFJAMU3amosf9mqumZZpHD6RRQ20nPfh
F3gKNh2S_wAfY05T.KqLBSrPbl9ui7LmI2h5vAZMw8owBM168VnqNJW9DQoSdQINNmO0hvwlpdH_
q.B83il3fsFbD5mdhB2caAXS6cqZ1Lom7pA8Birucn.fiPQNWhtOU2785Q1riq5A_.dGtwNPqImE
Q8y3tgd8k5.GABuJUj3D5usvQXtnOJ7vI41SRwg2dG9HlfRb.Cklvw.KKrqn5_LFlbN3eo65crxT
8ZLMA7fUsCjSHpHSHlLvNOUuODqMlDJfVwf1zmvAlhfyCNBmW5vRA3K02uriY5cVyF1FIwBl_Y4_
ZE8_yfCZuaElpF7V7BlVBgrHQZ4LrdEJL.yJmlpiE2PVLataNiAoKoa8Qr8CmN3XBTnr7RuW.gcZ
NRv_1UaHCXW0lGCft6BKmJWZWofSXFBTPBzDeF.kBso2Ti4DIOJgl.MxGijUO4RoDODcU1K0OuE7
QIa_w2vk_22Te2WLBN9vEdc8mr9Kqv3YnDWXEPdF9vHTkTSwfmvx0dMVFZe3e1a2H2y0b
X-Sonic-MF: <m_a_n_j_u_s_k@yahoo.com>
X-Sonic-ID: fdbabb5e-5347-4b69-829c-1e88068e0f40
X-Mailer: WebService/1.1.22129 YMailNorrin
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: CH2PEPF0000009D:EE_|DS7PR01MB7831:EE_
X-MS-Office365-Filtering-Correlation-Id: b04078c2-f17a-45ce-1ae9-08dc4644b682
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:66.163.188.110; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:sonic319-48.consmr.mail.ne1.yahoo.com;
PTR:sonic319-48.consmr.mail.ne1.yahoo.com; CAT:NONE;
SFS:(13230031)(61400799018)(48200799009)(376005); DIR:OUT; SFP:1102;
X-ExternalRecipientOutboundConnectors: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: mitprod.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Mar 2024 05:40:11.1436 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: b04078c2-f17a-45ce-1ae9-08dc4644b682
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: CH2PEPF0000009D.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR01MB7831
X-Content-Filtered-By: Mailman/MimeDel 2.1.34
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <1182031369.5745575.1710653866918@mail.yahoo.com>
X-Mailman-Original-References: <1182031369.5745575.1710653866918.ref@mail.yahoo.com>
 by: manju k - Sun, 17 Mar 2024 05:37 UTC

Hi,
I have a requirement to authenticate my application (Golang)  against a proxy server which requires Kerberos authentication.
I have achieved this on Windows using github/alexbrainman/sspi Golang package.From that package I basically call  negotiate.AcquireCurrentUserCredentials() and negotiate.NewClientContext() to get the client token which gets passed to the proxy server in Proxy-Authorization header.
I want to achieve the same on macOS and looking for suitable libraries.  Can I use MIT Kerberos library for this purpose ?what are the APIs equivalent to get client token without prompting the user for password ? The user would have acquired Kerberos ticket on sign-in as a domain user. Appreciate any inputs on this. Thank you.
-mk

1
server_pubkey.txt

rocksolid light 0.9.7
clearnet tor