{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/4566","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/4566/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/4566/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/4566/events","html_url":"https://github.com/openshift/origin/pull/4566","id":105294140,"number":4566,"title":"Kerberize oc","user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"sgallagher","id":739555,"avatar_url":"https://avatars.githubusercontent.com/u/739555?v=3","gravatar_id":"","url":"https://api.github.com/users/sgallagher","html_url":"https://github.com/sgallagher","followers_url":"https://api.github.com/users/sgallagher/followers","following_url":"https://api.github.com/users/sgallagher/following{/other_user}","gists_url":"https://api.github.com/users/sgallagher/gists{/gist_id}","starred_url":"https://api.github.com/users/sgallagher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sgallagher/subscriptions","organizations_url":"https://api.github.com/users/sgallagher/orgs","repos_url":"https://api.github.com/users/sgallagher/repos","events_url":"https://api.github.com/users/sgallagher/events{/privacy}","received_events_url":"https://api.github.com/users/sgallagher/received_events","type":"User","site_admin":false},"assignees":[{"login":"sgallagher","id":739555,"avatar_url":"https://avatars.githubusercontent.com/u/739555?v=3","gravatar_id":"","url":"https://api.github.com/users/sgallagher","html_url":"https://github.com/sgallagher","followers_url":"https://api.github.com/users/sgallagher/followers","following_url":"https://api.github.com/users/sgallagher/following{/other_user}","gists_url":"https://api.github.com/users/sgallagher/gists{/gist_id}","starred_url":"https://api.github.com/users/sgallagher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sgallagher/subscriptions","organizations_url":"https://api.github.com/users/sgallagher/orgs","repos_url":"https://api.github.com/users/sgallagher/repos","events_url":"https://api.github.com/users/sgallagher/events{/privacy}","received_events_url":"https://api.github.com/users/sgallagher/received_events","type":"User","site_admin":false}],"milestone":null,"comments":12,"created_at":"2015-09-08T03:35:21Z","updated_at":"2016-07-08T01:32:18Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/4566","html_url":"https://github.com/openshift/origin/pull/4566","diff_url":"https://github.com/openshift/origin/pull/4566.diff","patch_url":"https://github.com/openshift/origin/pull/4566.patch"},"body":"Tasks:\r\n- [x] Add `CompleteChallenge` to challenge handler interface\r\n- [x] Select challenge handler from list of optional handlers\r\n- [x] Implement negotiate handler\r\n- [x] Limit to principal if specified with `-u myuser`\r\n- [x] Unit tests\r\n- [x] Build for linux in brew builds\r\n- [x] Include linux in make-release.sh builds\r\n\r\nFollow ups:\r\n- [ ] Build for darwin in brew builds\r\n- [ ] Include darwin in make-release.sh builds\r\n\r\n**Building**\r\n  * To build on linux:\r\n\r\n    ```\r\n    sudo yum install -y krb5-devel\r\n    hack/build-go.sh cmd/oc -tags=gssapi\r\n    ```    \r\n\r\n  * To build on OS X:\r\n\r\n    ```\r\n    brew install homebrew/dupes/heimdal --without-x11\r\n    hack/build-go.sh cmd/oc -tags=gssapi\r\n    ```\r\n\r\n  * To verify that the currently built binary has support enabled:\r\n\r\n    ```\r\n    $ oc version\r\n    ...\r\n    features: Basic-Auth GSSAPI Kerberos SPNEGO\r\n    ```\r\n\r\n**Testing**\r\n\r\nFollowing the instructions at https://github.com/liggitt/auth-proxy/:\r\n* run the liggitt/auth-proxy docker image\r\n* set up your local Kerberos and browser to point `mydomain.com` to the running container\r\n* set an an identity provider like this:\r\n```\r\n  identityProviders:\r\n  - challenge: true\r\n    login: true\r\n    name: header\r\n    provider:\r\n      apiVersion: v1\r\n      challengeURL: \"http://mydomain.com/mod_auth_gssapi_basic/oauth/authorize?${query}\"\r\n      loginURL:     \"http://mydomain.com/mod_auth_gssapi/oauth/authorize?${query}\"\r\n      kind: RequestHeaderIdentityProvider\r\n      headers:\r\n      - Remote-User\r\n```\r\n\r\nWith an active Kerberos ticket (`kinit user1@MYDOMAIN.COM`, `password`):\r\n* Browser is automatically logged in\r\n* `oc login` automatically logs you in\r\n\r\nWithout an active Kerberos ticket (`kdestroy`):\r\n* Browser displays Unauthorized page\r\n* `oc login` falls back to basic auth"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/231254011","html_url":"https://github.com/openshift/origin/pull/4566#issuecomment-231254011","issue_url":"https://api.github.com/repos/openshift/origin/issues/4566","id":231254011,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2016-07-08T01:32:18Z","updated_at":"2016-07-08T01:32:18Z","body":"Green tests, holding for rebase"}}
{"actor":{"display_login":"liggitt"}}