kerberos with urllib2 proof of concept

[Trygve Laugstøl]

Tim Olsen wrote:
> On Wed, 25 Jun 2008 00:35:45 +0200
> Trygve Laugstøl <trygvis at inamo.no> wrote:
>> Solaris and Mac both have the kerberos command line tools (kinit and 
>> klist), but how would windows clients authenticate? Is there
>> something similiar to kinit in windows?
> 
> Kerberos is built into Microsoft's ActiveDirectory.  As usual though,
> it has been embraced-and-extended a bit.  I believe you can, however,
> set it up to work with a non-Microsoft KDC.  There is some
> information on it in _Kerberos:_The_Definitive_Guide_, published by
> O'Reilly (information in that book is current as of 5 years ago though).
> 
> Googling for "kerberos windows" pulls up some interesting links.
> There is an MIT kerberos distribution for Windows (see
> http://web.mit.edu/Kerberos/dist/).  I'm not sure if it includes kinit,
> but it does have Leash, a graphical UI for getting your tickets.

Yeah, I know about AD, but what I'm looking for is people using their 
home computers (or work) authenticating against my kerberos realm. I'll 
look at Leash and MITs stuff (I'm using their server to it should be 
relatively easy, in particular since I'm using DNS to configure the 
clients).

--
Trygve