GSS-API / SSPI authenticated Diffie-Hellman Key Exchange and user authentication #250

Closed
wants to merge 7 commits into
from

Projects

None yet

3 participants

@SebastianDeiss
Contributor

This patch implements the GSS-API / SSPI authenticated Diffie-Hellman
Key Exchange and user authentication (gssapi-keyex) with the context
established during key exchange.
In order to use this feature you need the following packages:

  • pyasn1 0.1.7
  • python-gssapi 0.4.0 (Unix)
  • pywin32 2.1.8 (Windows)

These packages are not required for Paramiko, but to use GSS-API / SSPI
authenticated key exchange you need to install them manually.
This patch also contains the patch of pull request #228 which implements
"diffie-hellman-group14-sha1" key exchange.

Sebastian Deiss added some commits Jan 13, 2014
Sebastian Deiss GSS-API / SSPI authenticated Diffie-Hellman Key Exchange and user
authentication

This patch implements the GSS-API / SSPI authenticated Diffie-Hellman
Key Exchange and user authentication (gssapi-keyex) with the context
established during key exchange.
In order to use this feature you need the following packages:
- pyasn1 0.1.7
- python-gssapi 0.4.0 (Unix)
- pywin32 2.1.8 (Windows)
These packages are not required for Paramiko, but to use GSS-API / SSPI
authenticated key exchange you need to install them manually.
This patch also contains the patch of pull request #228 which implements
"diffie-hellman-group14-sha1" key exchange.
f969693
Sebastian Deiss Updated copyright in Docstrings 001ded5
@lndbrg
Contributor
lndbrg commented Jan 16, 2014

Wow, great work. Most of it looks awesome. However, it would be great if you could make sure your multiline docstrings use double quotes " instead of single quotes '.

@lndbrg
Contributor
lndbrg commented Jan 16, 2014

There have also been a lot of work of porting fabric to python3 see #236, to ease the merge of this you might want to make sure that your changes are able to run on py3 (there are a few issues right now).

@lndbrg
Contributor
lndbrg commented Jan 16, 2014

This also superseeds #241 right?

@SebastianDeiss
Contributor

i changed the single quotes to double quotes in my docstrings and i am currently working on py3 support.
this patch also contains #241.

@lndbrg
Contributor
lndbrg commented Jan 20, 2014

Good! It would be great if you could add something about the change in the NEWS file while you are at it (a short one line-ish summary or so).

@bitprophet
Member

N.B. at this point please add items to sites/www/changelog.rst instead of NEWS :)

@SebastianDeiss
Contributor

OK

@SebastianDeiss SebastianDeiss pushed a commit to SebastianDeiss/paramiko that referenced this pull request Feb 11, 2014
Sebastian Deiss GSS-API / SSPI authenticated Diffie-Hellman Key Exchange and user
authentication with Python 3 support

Add Python 3 support for the GSS-API / SSPI authenticated Diffie-Hellman
Key Exchange and user authentication. This patch supersedes pull request
#250.
3e1f9f0
Sebastian Deiss added some commits Feb 17, 2014
Sebastian Deiss Improved handling of failed GSS-API authentication attempts
Previously an attribute error occurred or a SSHException was thrown if
the GSS-API authentication failed.
If GSS-API authentication fails now or the remote host does not support
GSS-API, paramiko tries other authentication methods.
c855880
Sebastian Deiss Improve Exception handling
If an GSS-API / SSPI error occurs you get a status code and an error
message, but you may also want the name of the remote host.
That's what this patch adds.
0006fc9
Sebastian Deiss Add userauth-banner handling for GSS-API authentication
Previously GSS-API authentication (gssapi-with-mic) failed if the server
sent a userauth-banner.
0f227e3
@SebastianDeiss SebastianDeiss referenced this pull request Mar 6, 2014
Closed

Kerberos support #82

@lndbrg
Contributor
lndbrg commented Aug 14, 2014

Superseded by #267

@lndbrg lndbrg closed this Aug 14, 2014
@bitprophet bitprophet added a commit that referenced this pull request Sep 9, 2014
@bitprophet bitprophet Update changelog re #267, #250 d992118
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment