Struct KerberosConfig 

pub struct KerberosConfig {
    pub service_principal: String,
    pub realm: String,
    pub keytab_path: Option<String>,
    pub kdc_addresses: Vec<String>,
    pub max_clock_skew_secs: u64,
    pub allow_delegation: bool,
    pub replay_cache_max_entries: usize,
}

Kerberos / SPNEGO configuration.

Fields

service_principal: String

Service principal name (e.g. HTTP/server.example.com@REALM).

realm: String

Kerberos realm (e.g. EXAMPLE.COM).

keytab_path: Option<String>

Path to the keytab file.

kdc_addresses: Vec<String>

KDC addresses for ticket verification.

max_clock_skew_secs: u64

Maximum allowed clock skew (default: 300 seconds / 5 minutes).

allow_delegation: bool

Whether to allow delegation (forwarded tickets).

replay_cache_max_entries: usize

Maximum replay cache entries before eviction.

Implementations

impl KerberosConfig

pub fn builder( service_principal: impl Into<String>, realm: impl Into<String>, ) -> KerberosConfigBuilder

Start building a KerberosConfig with the two required fields.

All optional fields default to KerberosConfig::default() values. Call .build() to validate and obtain the finished config.

Example

use auth_framework::protocols::kerberos::KerberosConfig;

let config = KerberosConfig::builder(
        "HTTP/server.example.com@EXAMPLE.COM",
        "EXAMPLE.COM",
    )
    .keytab_path("/etc/krb5.keytab")
    .add_kdc("kdc1.example.com:88")
    .add_kdc("kdc2.example.com:88")
    .build();

pub fn active_directory( service_principal: impl Into<String>, realm: impl Into<String>, ) -> Self

Shorthand for an Active Directory environment.

Sets allow_delegation to true (common in AD) and leaves the rest at defaults.

Example

let config = KerberosConfig::active_directory(
    "HTTP/server.corp.example.com@CORP.EXAMPLE.COM",
    "CORP.EXAMPLE.COM",
);

Trait Implementations

impl Clone for KerberosConfig

fn clone(&self) -> KerberosConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KerberosConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KerberosConfig

fn default() -> Self

Returns the “default value” for a type.