Description
The rkerberos library provides a Ruby interface for Kerberos.
Requirements
Kerberos 1.7.0 or later, including admin header and library files.
Synopsis
require 'rkerberos'
krb5 = Kerberos::Krb5.new
puts krb5.default_realm
krb5.close
keytab = Kerberos::Krb5::Keytab.new
puts keytab.default_name
keytab.close
kadm5 = Kerberos::Kadm5.new(:principal => 'foo/admin', :password => 'xxxx')
kadm5.set_password('someuser', 'abc123')
kadm5.close
Kerberos::Kadm5.new(:principal => 'foo/admin', :password => 'xxxx') do |kadm5|
p kadm5.get_principal('someuser')
kadm5.set_password('someuser', 'abc123')
end
Notes
The rkerberos library is a repackaging of my custom branch of the krb5_auth
library. Eventually the gem djberg96-krb5_auth will be removed from the gem
index.
MIT vs Heimdal
This code was written for the MIT Kerberos library. It has not been tested
with the Heimdal Kerberos library.
TODO
Create a separate class for the replay cache.
Better credentials cache support.
Ability to add and delete keytab entries.
Known Issues
OS X users will probably need to install Kerberos manually and specify
the dir-config option because it ships with old Kerberos header files,
and none of the admin headers or libraries by default.
Author
Daniel Berger