Package: python-requests-kerberos
Version: 0.14.0-4
Dear Maintainers,
python3-requests-kerberos is no longer functional for Kerberos/GSSAPI
authentication in Debian Trixie.
A typical usage pattern such as:
|from requests_kerberos import OPTIONAL, HTTPKerberosAuth import
requests session = requests.Session() session.auth =
HTTPKerberosAuth(mutual_authentication=OPTIONAL) |
fails at runtime when a Kerberos-authenticated request is performed:
|ImportError: GSSAPIProxy requires the Python gssapi library: No module
named 'krb5' |
The traceback shows that requests-kerberos now uses pyspnego:
|requests_kerberos -> pyspnego -> gssapi -> krb5 |
However, Debian Trixie does not provide a python3-krb5 package.
A related discussion can be found in Bug #1135986 against python3-pyspnego.
The practical result is that Kerberos authentication using
python3-requests-kerberos no longer works on Debian Stable.
This is a regression compared to Debian Bookworm:
|python3-requests-kerberos 0.12.0-2 -> python3-kerberos |
The Bookworm version continues to work on Trixie when installed
instead of 0.14.0-4.
This suggests that the migration from python3-kerberos to pyspnego
introduced a runtime dependency chain that cannot be satisfied in
Debian Trixie.
At the moment, users of python3-requests-kerberos on Debian Stable
have no supported way to perform Kerberos authentication.
Please consider either:
* restoring a functional kerberos backend for Stable
* coordinating a Stable-compatible fix with the pyspnego maintainers
* documenting that Kerberos authentication is not supported in Trixie
Best regards
Florian
--
Florian Best
Open Source Software Engineer
Geschäftsführer: Peter H. Ganten, Stefan Gohmann
HRB 20755 Amtsgericht Bremen
Steuer-Nr.: 71-597-02876
Univention GmbH
Mary-Somerville-Str. 1
28359 Bremen
Germany / Deutschland
