based on https://github.com/montag451/spnego-proxy
used go packages https://github.com/jcmturner/gokrb5
go run main.go -debug -realm REALM.MY -user HTTP -config /etc/krb5.conf -domain active-namenode.domain.my -keytab ~/tmp/HTTP.keytab
Add command line options for private key and certificate paths, the service with listen for TLS:
go run main.go -debug -realm REALM.MY -user HTTP -config /etc/krb5.conf -domain active-namenode.domain.my -keytab ~/tmp/HTTP.keytab -tls_key server.key -tls_crt server.crt
For testing purposes there is simple script mksstls for generating self signed pair.
go build
./spnego-svc <OPTIONS>
There is simple Makefile with release and build targets.
curl -s -H "Authorization: Negotiate $(curl -s localhost:8080/ktoken)" 'https://active-namenode.domain.my:50470/webhdfs/v1/?op=LISTSTATUS'
{"FileStatuses":{"FileStatus":[
{"accessTime":0,"blockSize":0,"childrenNum":1,"fileId":16386,"group":"supergroup","length":0,"modificationTime":1662640839709,"owner":"HTTP","pathSuffix":"test","permission":"755","replication":0,"storagePolicy":0,"type":"DIRECTORY"}
]}}generate password hash using python and bcrypt module
python -c 'import sys, bcrypt; print(bcrypt.hashpw(sys.argv[1].encode("ascii"), bcrypt.gensalt()).decode("ascii"))' PASSWORD
then create auth text file with format
USER:HASH
switch aunthentication on with -auth option
go run main.go ... -auth AUTH_FILE_NAME
test it all with curl
curl -i -d 'u=USER' -d 'p=PASSWORD' http://localhost:8080/ktoken
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent