krb5

Features:


+ An interface for maintaining credential caches (KRB5CCache),
that can be used for authenticating against a kerberos5 realm
+ Bindings for nearly the complete GSSAPI (RFC2744)
+ The administrative interface (KADM5)
+ Support for HTTP Negotiate authentication via GSSAPI

Documentation:
+ see docs/ for the API documentation
+ there are several pieces of example code in the examples/ directory
+ see below for install instructions

License: MIT License

Latest releases

Version Release Download
1.1.4 2020-09-14 krb5-1.1.4.tgz
1.1.3 2020-02-26 krb5-1.1.3.tgz
1.1.2 2017-04-08 krb5-1.1.2.tgz
1.1.1 2016-11-12 krb5-1.1.1.tgz
1.1.0 2016-07-16 krb5-1.1.0.tgz
Show all releases

Changelog

Version Message
1.1.4 - [FEATURE] PHP 8 compatability (thanks to Remi Collet)
- [BUG] Properly install header files (thanks to Remi Collet)
- [BUG] Fix behavior when NegotiateAuth is passed null as SPN
1.1.3 - [BUG] Keep proper minor status for error reporting in initSecContex
- [BUG] remove some overlooked debugging output
- [BUG] fix PECL package license metadata
- [FEATURE] Add API for password expiration information (MIT >=1.9 only)
- [FEATURE] Allow leaving the NegotiateAuth SPN unspecified (allow all from keytab)
- [FEATURE] Add support for gss_acquire_cred_from() instead of setting the per process keytab (in NegotiateAuth,
GSSAPI to follow).
- [FEATURE] Allow overriding SPN for NegotiateAuth.
1.1.2 - [BUG] Add missing function entry termination for TLData
- [CLEANUP] Don't return garbage on hard class initialization errors, don't throw from create_object handlers
1.1.1 - [FEATURE] Add KRB5CCache::changePassword kpasswd method
- [FEATURE] Add KADM5 API version 3 support (password failure policy)
- [BUG] properly mark shared globals external (fixes LLVM build)
- [BUG] Fix unterminated string copy memory corruption in negotiate_auth
- [BUG] properly free credentails in negotiate_auth (fixes rcache leaks)
- [BUG] fix _add_assoc_string string length (fixes extra null bytes in some arrays)
- [BUG] fix PHP7 crash due to wrong addrlist zval declaration
1.1.0 - [FEATURE] PHP7 compatibility
- [FEATURE] Support getting/setting TL_DATA in KADM
- [BUG] Fix GSSAPI->acquireCredentials behaviour,
now defaults to GSS_C_INITIATE if only a ccache is available
eagerly initialize credentials when no principal is specified (use ccache default principal)
- [BUG] Fix a couple of memory leaks, add a few more sanity checks
Show complete changelog