Changeset 1642

Timestamp:

Nov 14, 2008, 3:39:21 AM (15 years ago)

Author:

broder

Message:

Add (crude) support for SPNEGO in the web interface

File:

• trunk/packages/invirt-web/code/main.py (modified) (1 diff)

trunk/packages/invirt-web/code/main.py

@@ -653 +653 @@
 def getUser(environ):
     """Return the current user based on the SSL environment variables"""
-    return environ.get('REMOTE_USER', None)
+    user = environ.get('REMOTE_USER')
+    if user is None:
+        return
+    
+    if environ.get('AUTH_TYPE') == 'Negotiate':
+        # Convert the krb5 principal into a krb4 username
+        if not user.endswith('@%s' % config.authn[0].realm):
+            return
+        else:
+            return user.split('@')[0].replace('/', '.')
+    else:
+        return user
 
 def handler(username, state, path, fields):