Ben DeMott

add kerberos auth support

6

Hi, privately I implemented Kerberos auth on top of HVAC. Vault now supports SPNEGO auth (unceremoniously documented here) https://www.vaultproject.io/api/auth/kerberos#login-with-kerberos The Kerberos auth endpoints are nearly identical to LDAP, so I...

can no longer subclass prometheus_client.twisted.MetricsResource

1

In Twisted resources are designed to be subclassed. Now that MetricsResource is hidden behind a lambda, it can no longer be subclassed. Can you provide a easy way to subclass...

Java clients fail to authenticate against servers using `gokrb5`

2

I'm triggering [this line of code](https://github.com/jcmturner/gokrb5/blob/663478bf457f1fc3275973bea5b7b787cd332015/spnego/negotiationToken.go#L115) and getting `gssapi.StatusContinueNeeded` response, when attempting to authenticate from any Java Kerberos client. ```golang if m.Equal(gssapi.OID(gssapi.OIDKRB5)) || m.Equal(gssapi.OID(gssapi.OIDMSLegacyKRB5)) { if n.mechToken == nil &&...

Support uploading files using with `sudo` Many environments do not allow connecting as root - so users must use `sudo` to elevate their permissions. Goal is to provide any easy...

Docker Builds: Differentiate Ray Versions?

2

### Description I can't find a way to easily understand docker labels and ray major versions. I spent several hours trying to understand if ray releases are `2.0.0` vs `3.0.0`...

Auth implementation, based upon LDAP I do not currently have access to a KDC so this is adapted from 3 year old code. I also have never tested gssapi with...

Include "bar.goto()" in examples

1

With the current documentation a common use case which is advancing to a specific amount. In the case of downloading a file from sftp (for example) the callback tells how...

When trying to compile with Java 9, I get split package errors the moment I import `kerb4j` ``` error: the unnamed module reads package com.kerb4j.client from both kerb4j.client and kerb4j.common...

Uncaught exception trying to obtain pre-existing credentials with Keytab Auth

1

The code near line `156` in `context.py` attempts to get existing credentials before it creates a temporary credentials cache for keytab auth. ``` creds = gssapi.creds.Credentials(**creds_opts) ``` The above line...

Environment issue where the command-line args are not properly forwarded. The environment use of /usr/bin/python may need to be changed or be platform specific.