gssapi

Documentation

Index

• type Client
  • func NewClientFromCCache(ccachePath, krb5confPath string, settings ...func(*client.Settings)) (*Client, error)
  • func NewClientWithKeytab(username, realm, keytabPath, krb5confPath string, ...) (*Client, error)
  • func NewClientWithPassword(username, realm, password string, krb5confPath string, ...) (*Client, error)
  • func (client *Client) Close() error
  • func (client *Client) DeleteSecContext() error
  • func (client *Client) InitSecContext(target string, input []byte) ([]byte, bool, error)
  • func (client *Client) NegotiateSaslAuth(input []byte, authzid string) ([]byte, error)

Types

type Client

type Client struct {
	*client.Client

	Subkey types.EncryptionKey
	// contains filtered or unexported fields
}

Client implements ldap.GSSAPIClient interface.

func NewClientFromCCache

func NewClientFromCCache(ccachePath, krb5confPath string, settings ...func(*client.Settings)) (*Client, error)

NewClientFromCCache creates a new client from a populated client cache.

func NewClientWithKeytab

func NewClientWithKeytab(username, realm, keytabPath, krb5confPath string, settings ...func(*client.Settings)) (*Client, error)

NewClientWithKeytab creates a new client from a keytab credential. Set the realm to empty string to use the default realm from config.

func NewClientWithPassword

func NewClientWithPassword(username, realm, password string, krb5confPath string, settings ...func(*client.Settings)) (*Client, error)

NewClientWithPassword creates a new client from a password credential. Set the realm to empty string to use the default realm from config.

func (*Client) Close

func (client *Client) Close() error

Close deletes any established secure context and closes the client.

func (*Client) DeleteSecContext

func (client *Client) DeleteSecContext() error

DeleteSecContext destroys any established secure context.

func (*Client) InitSecContext

func (client *Client) InitSecContext(target string, input []byte) ([]byte, bool, error)

InitSecContext initiates the establishment of a security context for GSS-API between the client and server. See RFC 4752 section 3.1.

func (*Client) NegotiateSaslAuth

func (client *Client) NegotiateSaslAuth(input []byte, authzid string) ([]byte, error)

NegotiateSaslAuth performs the last step of the SASL handshake. See RFC 4752 section 3.1.