jcmturner / gokrb5

Pure Go Kerberos library for clients and services
Apache License 2.0
725 stars 248 forks source link

client login using keytab file #533

Open karman-docker opened 11 months ago

karman-docker commented 11 months ago

Hi, I am using this library for Kerberos authentication in my application. I have followed the examples provided in this repository to login my client application using a keytab file. Is there any other way for the client to login to KDC without using keytab file? The reason for my query is if the application is being used by thousands of users, this will require all those users first create a keytab file. I am wondering if there is some other alternative to using a keytab file. Similar to a browser which doesn't use keytab file. How does a browser able to sign-in to KDC without a keytab file ? Does it use the TGT generated when the user signs-in ?