Thanks Ken,I understand I need to use GSSAPI for Linux/MacOS platforms. I was wondering if I can use MIT Kerberos GSSAPI for the same. Does libcurl use MIT Kerberos gssapi ? Yes my proxy header would look exactly like you mentioned. Thank-you.
Yahoo Mail: Search, organise, conquer On Mon, 18 Mar 2024 at 12:11 am, Ken Hornstein<k...@cmf.nrl.navy.mil> wrote: >Hi, I have a requirement to authenticate my application >(Golang) against a proxy server which requires Kerberos >authentication. I have achieved this on Windows using >github/alexbrainman/sspi Golang package.From that package I >basically call negotiate.AcquireCurrentUserCredentials() and >negotiate.NewClientContext() to get the client token which gets passed >to the proxy server in Proxy-Authorization header. I want to achieve >the same on macOS and looking for suitable libraries. Can I use MIT >Kerberos library for this purpose ?what are the APIs equivalent to get >client token without prompting the user for password ? The user would >have acquired Kerberos ticket on sign-in as a domain user. I believe you would want to use the GSSAPI for this. If your header looks like: Proxy-Authorization: Negotiate <base64 encoded data> Then definitely you want to use that. You could use libcurl as example code if you wanted to see what this would look like. --Ken ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
