ETOOBUSY 🚀 minimal blogging for the impatient
Example LDAP with on-the-fly Kerberos authentication
TL;DR
An example to do Kerberos authentication in memory, i.e. without the need of using [kinit][] beforehand or to save anything on the disk.
Mixing Net::LDAP with Authen::SASL, being aware of how GSSAPI works and using Authen::Krb5 to get an initial ticket, without necessarily saving anything in the filesystem.
The acquire_TGT
function is basically the same as A bare-bones kinit
in Perl - nothing new here. Getting stuff with LDAP_search
is
basically the same as in eldap. So… we’re just doing plain ol’
integration here - all with a configuration file!
Well… be my guest, future me, and stay safe everybody!