kerberos with urllib2 proof of concept

[Trygve Laugstøl]

Trygve Laugstøl wrote:
> Tim Olsen wrote:
>> On Wed, 25 Jun 2008 00:35:45 +0200
>> Trygve Laugstøl <trygvis at inamo.no> wrote:
>>> Solaris and Mac both have the kerberos command line tools (kinit and 
>>> klist), but how would windows clients authenticate? Is there
>>> something similiar to kinit in windows?
>> Kerberos is built into Microsoft's ActiveDirectory.  As usual though,
>> it has been embraced-and-extended a bit.  I believe you can, however,
>> set it up to work with a non-Microsoft KDC.  There is some
>> information on it in _Kerberos:_The_Definitive_Guide_, published by
>> O'Reilly (information in that book is current as of 5 years ago though).
>>
>> Googling for "kerberos windows" pulls up some interesting links.
>> There is an MIT kerberos distribution for Windows (see
>> http://web.mit.edu/Kerberos/dist/).  I'm not sure if it includes kinit,
>> but it does have Leash, a graphical UI for getting your tickets.
> 
> Yeah, I know about AD, but what I'm looking for is people using their 
> home computers (or work) authenticating against my kerberos realm. I'll 
> look at Leash and MITs stuff (I'm using their server to it should be 
> relatively easy, in particular since I'm using DNS to configure the 
> clients).

Ok, I finally have a good Kerberos setup going. How do I test your stuff?

--
Trygve