search

goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
13.49k stars 900 forks source link

Kerberos provider #5990

Open rissson opened 1 year ago

rissson commented 1 year ago

Describe the idea

Implement a Kerberos provider. authentik would act as a KDC, allowing users to get keytabs for services.

I've already laid out some ground work at https://github.com/rissson/authentik/tree/kerberos-as-proxy, but that's very much a WIP.

The idea behind that implementation is that authentik would receive KDCProxy requests at /application/k/my_app/proxy/, decode them and process the request from there. Technically, it could be implemented as an outpost, but I don't want to do that as we need to make some database access (as the user's keytab is retrieved multiple times during authentication), and because I don't want to write Go for fun.

If you want to help working on this idea or want to contribute in any other way, react to this issue with a :rocket:

rissson commented 1 year ago

I want to work on this.

Mareo commented 1 year ago

I want to work on this.

rqi14 commented 1 year ago

Hi. Is this going to be implemented in the near future?

rissson commented 1 year ago

@Mareo and I definitely plan to continue working on this. We have some stuff going currently but we will pick this up at some point.

rqi14 commented 1 year ago

@Mareo and I definitely plan to continue working on this. We have some stuff going currently but we will pick this up at some point.

Sounds great! It will be very helpful if this feature comes true. Thank you both very much

alteredtech commented 3 months ago

Just checking to see if there was an update on this? Looking at the PR draft, there hasnt been a commit in a year. Is this on the roadmap at all?