krb5

Sep 12, 2026

Changes in this version

+ var ErrNotSealed = errors.New("krb5: wrap token is not sealed")

type Context

+ func (c *Context) Seal(msg []byte) ([]byte, error)

+ func (c *Context) Unseal(token []byte) ([]byte, error)

Sep 11, 2026

Changes in this version

+ var ErrBadMIC = errors.New("krb5: bad message signature")

+ var ErrNoKeytab = errors.New("krb5: keytab")

+ var ErrNotAPReq = errors.New("krb5: token is not an AP-REQ")

+ var ErrNotAToken = errors.New("krb5: not a GSS-API krb5 token")

+ var ErrRejected = errors.New("krb5: ticket rejected")

+ var ErrSealed = errors.New("krb5: wrap token is sealed (sec=krb5p is not implemented)")

+ type Acceptor struct

+ func Load(path string, opts ...Option) (*Acceptor, error)

+ func New(kt *keytab.Keytab, opts ...Option) *Acceptor

+ func (a *Acceptor) Accept(token []byte) (*Context, []byte, error)

+ type Context struct

+ func (c *Context) Expires() time.Time

+ func (c *Context) MIC(msg []byte) ([]byte, error)

+ func (c *Context) PeerSequence() uint64

+ func (c *Context) Principal() string

+ func (c *Context) Realm() string

+ func (c *Context) Unwrap(token []byte) ([]byte, error)

+ func (c *Context) User() string

+ func (c *Context) VerifyMIC(msg, token []byte) error

+ func (c *Context) Wrap(msg []byte) ([]byte, error)

+ type Option func(*Acceptor)

+ func ClockSkew(seconds int) Option

+ func Principal(name string) Option