Kerberos auth

[sfonteneau]

I saw in your project description that the CEP/CES protocol doesn’t support Kerberos authentication.

For your information, if you go through Nginx SPNEGO, it works well: https://packages.debian.org/trixie/libnginx-mod-http-auth-spnego

You just need to generate a keytab.

[creatica-soft]

Hi Simon, thank you for pointing it out. I am about to correct this error in the project description but I am not able to find where exactly it says that kerberos authentication is not supported. If nginx supports it via spnego module and it's not an enterprise feature that requires a license, nginx is configured with keytab file and possibly a Kerberos configuration file or nginx settings, it would work. I haven't tested it when I worked on the project because username and password auth protected by TLS was sufficient. If you could please indicate where I need to update the project description, I'll fix it. Thanks again.
PS. I suppose I would need to update my code as well to support it.

[sfonteneau]

spnego is now in the Debian 13 public repositories, so it can be considered no longer exclusive to the enterprise version. Once the Nginx layer with Kerberos is passed, the user's identifier is found in the authentication header (username). This is slightly different from the login/password, which is found in the XML. If you want more information about the user, you still need a service account to retrieve the user via an LDAP request. You might need to modify some code on your end.