Add endpoint for GSSAPI Authentication #88
Conversation
antoniotorresm
force-pushed
the
gssapi
branch
3 times, most recently
from
7f05e7d to
33b9257
Compare
antoniotorresm
force-pushed
the
gssapi
branch
4 times, most recently
from
c9cc10d to
78ef05b
Compare
antoniotorresm
force-pushed
the
gssapi
branch
3 times, most recently
from
48e90e9 to
8440492
Compare
|
Added a new field to the domain model, |
antoniotorresm
force-pushed
the
gssapi
branch
5 times, most recently
from
a883a81 to
6d871d3
Compare
antoniotorresm
force-pushed
the
gssapi
branch
from
6d871d3 to
6986cef
Compare
|
/retest |
There was a problem hiding this comment.
LGTM!
I have tested the new end-points for IPA and AD use cases using the same curl calls:
curl -k -v -X POST --negotiate -u : https://bridge.ipa.test/bridge/login_kerberos/
curl -k -v -X POST https://bridge.ipa.test/bridge/login_password/ --data 'user=ipauser&password=Secret123'
I think the PR covers the initial feature for IPA and AD, and it can be easily extended later on to cover RHDS/LDAPwithKerberos.
Ref testing, we are enabling RedHatTrustedPipeline and the plan is to run extensive e2e tests there.
antoniotorresm
force-pushed
the
gssapi
branch
2 times, most recently
from
5ef3a5d to
c796af2
Compare
Add the `login_kerberos` endpoint for handling GSSAPI authentications. mod_auth_gssapi and gssproxy are included as dependencies. Additional steps are included to the IPA domain addition, such as the addition of the HTTP service and keytab retrieval. Additionally, `login_password` endpoint is provided as well, which requests a ticket using the user and password passed with the client request. Signed-off-by: Antonio Torres <[email protected]>
antoniotorresm
force-pushed
the
gssapi
branch
from
c796af2 to
677065b
Compare
|
Added |
Add the
login_kerberosendpoint for handling GSSAPI authentications. mod_auth_gssapi and gssproxy are included as dependencies. Additional steps are included to the IPA domain addition, such as the addition of the HTTP service and keytab retrieval. Additionally,login_passwordendpoint is provided as well, which requests a ticket using the user and password passed with the client request.