In an effort to be able to to use GSS-Proxy as a client in IPA I've
written a patch against python-kerberos to add a call to
gss_cred_inquire so we can peek at the current principal name. This will
replace the python-krbV call in ipapython/util.py::get_current_principal().
The patch is pending review upstream at
https://trac.calendarserver.org/ticket/830#comment:1 but it hasn't seen
any activity yet and I'm impatient.
Anyone have a few moments to take a look? I'm not super happy with the
way one has to call it and some feedback would be helpful.
Freeipa-devel mailing list