gokrb5 - Pure Go Kerberos library for clients and services

  •        100

gokrb5 may work with other versions of Go but they are not tested. If you are interested in contributing to gokrb5, great! Please read the contribution guidelines.




Related Projects

Kerberos Module For Apache

  •    C

Mod_auth_kerb is a module that provides Kerberos user authentication to the Apache web server. It allows to retrieve the username/password pair, and also supports full Kerberos authentication (also known as Negotiate or SPNEGO based authentication).

Apache Kerberos/SPNEGO module

  •    C

GSS-API/SPNEGO authentication module for Apache 1.3.26;SPNEGO APIs (see fbopenssl);SPNEGO authentication module for Apache 1.3 and 2.0 (see mod_spnego)

Waffle - Enable drop-in Windows Single Sign On for popular Java web servers

  •    Java

WAFFLE is a native Windows Authentication Framework consisting of two C# and Java libraries that perform functions related to Windows authentication, supporting Negotiate, NTLM and Kerberos. Waffle also includes libraries that enable drop-in Windows Single Sign On for popular Java web servers, when running on Windows. While Waffle makes it ridiculously easy to do Windows Authentication in Java, on Windows, Waffle does not work on *nix(UNIX-like). Unlike many other implementations Waffle on Windows does not require any server-side Kerberos keytab setup, it's a drop-in solution.

tomcat authentication on windows via spnego (ntlm or kerberos)


Tomcat is an servlets container. With tomcatspnego, users working on a Windows client OS and IE or Firefox, can be silently authenticated to a Tomcat running on a Windows server. You can define autorizations to tomcat's applications with domain's groups.


  •    C

KX.509: X.509 certificates using Kerberos -- Convenient, Secure, Web Authentication. KX.509 is an open source project that provides a Kerberos realm's users with a secure means of acquiring short-term X.509 certificates via Kerberos authentication.

PKI authentication in Kerberos

  •    C

PKINIT is an extension of the Kerberos v5 protokol allowing users to use their PKI credentials for getting kerberos tickets. This project provides an implementation of the PKINIT specification for the Heimdal implementation of Kerberos5.

Kerberos.NET - A Kerberos implementation built entirely in managed code.

  •    CSharp

A complete Kerberos library built entirely in managed code without (many) OS dependencies. This project is supported by the .NET Foundation.

KMail - KDE Email Application

  •    C++

KMail is the email component of Kontact, the integrated personal information manager from KDE. It supports the standard mail protocols IMAP, POP3 and SMTP. It supports authentication via NTLM (Microsoft Windows) and GSSAPI (Kerberos). It has native support for inline OpenPGP, PGP/MIME, and S/MIME.

Kerberos Poppassd

  •    C

Kerberos Poppassd is a password changing daemon based upon poppassd version 1.8 by Pawel Krawczyk. The daemon works exactly like the original poppassd. The only difference being that this poppassd changes a users Kerberos 5 password.

Kerberos Authorization Directory


Kerberos Authorization Directory give docs and tools to manage a Kerberos with LDAP backend. The target is not develop a new infrastructure but to allow integration of existing servers, supplying also patches to increase the usability of the whole system

Graphical kinit


Kerberos login dialog that talks to NetworkManager and tries to log you on to kerberos when you connect to your kerberized network.

Apache Directory Server - An extensible, embeddable LDAP and Kerberos server, entirely in Java

  •    Java

ApacheDS is an extensible and embeddable directory server entirely written in Java, which has been certified LDAPv3 compatible by the Open Group. Besides LDAP it supports Kerberos 5 and the Change Password Protocol. It has been designed to introduce triggers, stored procedures, queues and views to the world of LDAP which has lacked these rich constructs.


  •    C

pam_krb5 is designed to allow smooth integration of Kerberos 5 passwordchecking with applications built using PAM. It also supports session-specific ticket files (which are neater), Kerberos IV ticket file grabbing, and AFS token-grabbing.

kekeo - A little toolbox to play with Microsoft Kerberos in C

  •    C

In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C (http://www.oss.com/asn1/products/asn1-c/asn1-c.html) It was the only code generator/library that I've found to work easily with Microsoft C project. You can't build kekeo out-of-the-box, you'have to generate C files and link with OSS libraries.

Yet Another FTP Client

  •    C

Yafc is an OpenSource console mode FTP client. It has support for Kerberos 4/5 authentication and sftp (ssh2). Other features include tab completion, directory cache, powerful aliases, recursive file commands and bookmarks with autologin.

exchangelib - Python client for Microsoft Exchange Web Services (EWS)

  •    Python

This module provides an well-performing, well-behaving, platform-independent and simple interface for communicating with a Microsoft Exchange 2007-2016 Server or Office365 using Exchange Web Services (EWS). It currently implements autodiscover, and functions for searching, creating, updating, deleting, exporting and uploading calendar, mailbox, task, contact and distribution list items. exchangelib uses the lxml package, and pykerberos to support Kerberos authentication. To be able to install these, you may need to install some additional operating system packages.

curl - A command line tool and library for transferring data with URL syntax, supporting HTTP, HTTPS, FTP, FTPS, GOPHER, TFTP, SCP, SFTP, SMB, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP

  •    C

curl is used in command lines or scripts to transfer data. It is also used in cars, television sets, routers, printers, audio equipment, mobile phones, tablets, settop boxes, media players and is the internet transfer backbone for thousands of software applications affecting billions of humans daily.

s+c Authentication Package

  •    C++

scap is a Windows Authentication Package wrapping the builtin Kerberos Authentication using LDAP services.

DCOMShim RCW Authentication Wrapper for .NET

  •    DotNet

DCOMShim is a RCW that authenticates to any DCOM object using Kerberos. This is needed because the default RCW in .NET limits your functionality of CoCreateInstanceEx(). DCOMShim is an example of how to use custom wrappers to alter the nature of CoCreateInstanceEx()


  •    Python

PuSSH is Pythonic, Ubiquitous SSH, a Python wrapper/script that runs commands in parallel on clusters/ranges of linux/unix machines via SSH, ideally where SSH is configured to use Kerberos, RSA/DSA keys, or ssh-agent as to avoid password authentication.

We have large collection of open source products. Follow the tags from Tag Cloud >>

Open source products are scattered around the web. Please provide information about the open source projects you own / you use. Add Projects.