gosasl is a library for different SASL mechanisms. Currently GSSAPI, DIGEST-MD5, PLAIN and ANONYMOUS are implemented. Support for other mechanisms may be added in the future. Only GSSAPI supports a QOP higher than auth.
Gosasl can be installed with:
go get github.com/beltran/gosasl
To add kerberos support gosasl requires header files to build against the GSSAPI C library. They can be installed with:
- Ubuntu:
sudo apt-get install libkrb5-dev - MacOS:
brew install homebrew/dupes/heimdal --without-x11 - Debian:
yum install -y krb5-devel
Then:
go get -tags kerberos github.com/beltran/gosasl
mechanism, err := NewGSSAPIMechanism("service")
if err != nil {
log.Fatal(err)
}
conn = getConnection("somehost")
client := NewSaslClientWithMechanism("somehost", mechanism)
response, err := client.Start()
if err != nil {
log.Fatal(err)
}
conn.sendResponse(response)
for true {
status, challenge = conn.getChallenge()
if status == COMPLETE {
break
} else if status == OK {
response = client.Step(challenge)
conn.sendResponse(response)
} else {
log.Fatal("Failed to establish connection")
}
}
if !client.Complete() {
log.Fatal("SASL negotiation did not complete")
}
// begin normal communication
encoded := conn.fetchData()
decoded := client.Decode(encoded)
response = processData(decoded)
conn.sendData(client.Encode(response))
client.Dispose()This library is inspired by pure-sasl.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent