Add endpoint for GSSAPI Authentication

freeipa / ipa-tuura

GNU General Public License v3.0

9 stars 11 forks source link

Add endpoint for GSSAPI Authentication #88

Closed antoniotorresm closed 6 months ago

antoniotorresm commented 8 months ago

Add the login_kerberos endpoint for handling GSSAPI authentications. mod_auth_gssapi and gssproxy are included as dependencies. Additional steps are included to the IPA domain addition, such as the addition of the HTTP service and keytab retrieval. Additionally, login_password endpoint is provided as well, which requests a ticket using the user and password passed with the client request.

antoniotorresm commented 7 months ago

Added a new field to the domain model, keycloak_hostname that will take the hostname for the Keycloak host. I have also added automation for SPN creation and keytab retrieval on AD hosts.

antoniotorresm commented 7 months ago

/retest

antoniotorresm commented 7 months ago

Added Remote-User response header, needed for Keycloak plugin.