Re: Kerberos Proxy Authentication

Pavel Kazlenka <[email protected]> Wed, 31 Aug 2016 21:54:41 +0200
Newsgroups gmane.comp.web.web-polygraph.user
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============0602147821043068504==
Content-Type: multipart/alternative;
 boundary="------------AEEB25F0FA4FAA1DAB376C97"

This is a multi-part message in MIME format.
--------------AEEB25F0FA4FAA1DAB376C97
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit

Hi Michael,

To add kerberos authentication support, you first need to configure the 
KerberosWrap object in your workload, e.g.:

KerberosWrap kerberosWrap = {
         realm = "YOUR_REALM";
         servers = ['kerberos.server:<port>'];
         timeout = 30sec;
};

Then you may configure your robots (clients) in an usual manner:

Robot R = {
        ...
         credentials = [ "kerb_user:kerb_pass" ];
         kerberos_wrap = kerberosWrap;
};


On 08/31/2016 07:16 AM, Michael Hendrie wrote:
> Hi There,
>
> I have been using NTLM and BASIC proxy authentication in workloads for 
> some time with great success.  I see Kerberos proxy authentication 
> support was added in 4.8.0 but am having difficulty finding any doc or 
> config examples for using.
>>   - Negotiate/Kerberos proxy authentication support, configurable via
>>      PGL KerberosWrap. Both UDP and TCP transports are supported for
>>      communication with KDC. MIT Kerberos v1.9 or newer is required. No
>>      Heimdal support.
> The PGL Types doc at 
> http://www.web-polygraph.org/docs/reference/pgl/types.html doesn't 
> mention KerberosWrap and neither does the Authentication doc at 
> http://www.web-polygraph.org/docs/userman/auth.html
>
> If anyone can point me towards some doc...and hopefully and hopefully 
> a working config example of how to configure the KerberosWrap and 
> credential definition in a workload that would be much appreciated.
>
> Thanks,
>
> Michael
>
>
>
>
> _______________________________________________
> Users mailing list
> [email protected]
> http://lists.web-polygraph.org/mailman/listinfo/users



--------------AEEB25F0FA4FAA1DAB376C97
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Hi Michael,<br>
      <br>
      To add kerberos authentication support, you first need to
      configure the KerberosWrap object in your workload, e.g.:<br>
      <br>
      KerberosWrap kerberosWrap = {<br>
              realm = "YOUR_REALM";<br>
              servers = ['kerberos.server:&lt;port&gt;'];<br>
              timeout = 30sec;<br>
      };<br>
      <br>
      Then you may configure your robots (clients) in an usual manner:<br>
      <br>
      Robot R = {<br>
             ...<br>
              credentials = [ "kerb_user:kerb_pass" ];<br>
              kerberos_wrap = kerberosWrap;<br>
      };<br>
      <br>
      <br>
      On 08/31/2016 07:16 AM, Michael Hendrie wrote:<br>
    </div>
    <blockquote
      cite="mid:433D0050-393E-4E65-AB10-4C989BC78EF4-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      Hi There,
      <div class=""><br class="">
      </div>
      <div class="">I have been using NTLM and BASIC proxy
        authentication in workloads for some time with great success.  I
        see Kerberos proxy authentication support was added in 4.8.0 but
        am having difficulty finding any doc or config examples for
        using.</div>
      <div class="">
        <blockquote type="cite" class="">
          <pre style="font-style: italic;" class=""> - Negotiate/Kerberos proxy authentication support, configurable via
    PGL KerberosWrap. Both UDP and TCP transports are supported for
    communication with KDC. MIT Kerberos v1.9 or newer is required. No
    Heimdal support.</pre>
        </blockquote>
        <div class="">The PGL Types doc at <a moz-do-not-send="true"
            href="http://www.web-polygraph.org/docs/reference/pgl/types.html"
            class="">http://www.web-polygraph.org/docs/reference/pgl/types.html</a>
          doesn't mention KerberosWrap and neither does the
          Authentication doc at <a moz-do-not-send="true"
            href="http://www.web-polygraph.org/docs/userman/auth.html"
            class="">http://www.web-polygraph.org/docs/userman/auth.html</a></div>
      </div>
      <div class=""><br class="">
      </div>
      <div class="">If anyone can point me towards some doc...and
        hopefully and hopefully a working config example of how to
        configure the KerberosWrap and credential definition in a
        workload that would be much appreciated.</div>
      <div class=""><br class="">
      </div>
      <div class="">Thanks,</div>
      <div class=""><br class="">
      </div>
      <div class="">Michael</div>
      <div class=""><br class="">
      </div>
      <div class=""><br class="">
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a>
<a class="moz-txt-link-freetext" href="http://lists.web-polygraph.org/mailman/listinfo/users">http://lists.web-polygraph.org/mailman/listinfo/users</a></pre>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>

--------------AEEB25F0FA4FAA1DAB376C97--

--===============0602147821043068504==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Users mailing list
[email protected]
http://lists.web-polygraph.org/mailman/listinfo/users
--===============0602147821043068504==--