proxy

Documentation

Index

• Constants
• func MarshalKerbLength(n int) []byte
• func UnmarshalKerbLength(b []byte) (int, error)
• type KdcProxyMsg
• type KerberosProxy
  • func InitKdcProxy() (*KerberosProxy, error)
  • func InitKdcProxyWithConfig(config string) (*KerberosProxy, error)
  • func InitKdcProxyWithConfigAndLimit(config string, limit int) (*KerberosProxy, error)
  • func InitKdcProxyWithLimit(limit int) (*KerberosProxy, error)
  • func (k *KerberosProxy) Handler(w http.ResponseWriter, r *http.Request)
  • func (k *KerberosProxy) Metrics() http.Handler

Constants

const DefaultRateLimit = 10

DefaultRateLimit is the default number of requests per second to allow

Functions

func MarshalKerbLength

func MarshalKerbLength(n int) []byte

MarshalKerbLength encodes the length of a kerberos message as bytes

func UnmarshalKerbLength

func UnmarshalKerbLength(b []byte) (int, error)

UnmarshalKerbLength returns the length of a kerberos message based on the leading 4-bytes

Types

type KdcProxyMsg

type KdcProxyMsg struct {
	KerbMessage   []byte `asn1:"tag:0,explicit"`
	TargetDomain  string `asn1:"tag:1,optional,generalstring"`
	DcLocatorHint int    `asn1:"tag:2,optional"`
}

KdcProxyMsg represents a KDC_PROXY_MESSAGE as per https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-kkdcp/5778aff5-b182-4b97-a970-29c7f911eef2

type KerberosProxy

type KerberosProxy struct {
	// contains filtered or unexported fields
}

KerberosProxy is a KDC Proxy

func InitKdcProxy

func InitKdcProxy() (*KerberosProxy, error)

InitKdcProxy creates a KerberosProxy using the defaults of looking up KDC's via DNS

func InitKdcProxyWithConfig

func InitKdcProxyWithConfig(config string) (*KerberosProxy, error)

InitKdcProxyWithConfig creates a KerberosProxy based on the configured "krb5.conf" file

func InitKdcProxyWithConfigAndLimit

func InitKdcProxyWithConfigAndLimit(config string, limit int) (*KerberosProxy, error)

InitKdcProxyWithConfigAndLimit creates a KerberosProxy based on the configured "krb5.conf" file

func InitKdcProxyWithLimit

func InitKdcProxyWithLimit(limit int) (*KerberosProxy, error)

InitKdcProxyWithLimit creates a KerberosProxy using the defaults of looking up KDC's via DNS

func (*KerberosProxy) Handler

func (k *KerberosProxy) Handler(w http.ResponseWriter, r *http.Request)

Handler implements a KDC Proxy endpoint over HTTP

func (*KerberosProxy) Metrics

func (k *KerberosProxy) Metrics() http.Handler

Prometheus metrics handler