Kerberos plugin for repoze.who
Project description
Introduction
This is a repoze.who plugin for automated authentication via Kerberos (incl. Windows Active Directory). You can use this plugin to authenticate your Windows Active Directory users automatically without entering a username or password (single sign on). In combination with repoze.who.plugins.ldap you can also use the user attributes (fullname, email, etc.) from your Active Directory.
This plugin works on Windows and linux. On linux it does not work out of the box. You need a proper HTTP service principal in your kerberos configuration to use it.
Example
There is a demo application to help you get started. The configuration is in the who_activedirectory.ini file.
$ hg clone https://bitbucket.org/domruf/repoze.who.plugins.kerberos $ cd repoze.who.plugins.kerberos $ python setup.py install $ paster serve demo.ini
