Repository navigation
http proxy negotiate/gssapi authentication? #83
Description
I was hoping to find a HTTPProxyKerberosAuth class to enable working with http proxies that require NEGOTIATE gssapi auth, like certain configurations of squid. Is there a way to use requests-kerberos handle that scenario as it currently stands?
This would be akin to HTTPProxyDigestAuth from requests-toolbelt, if the necessary code doesn't already exist somewhere.
Activity
Lukasa commentedon Oct 23, 2016
requests-kerberos cannot currently handle that kind of authentication.
benley commentedon Oct 23, 2016
Thank you for clarifying. Is it proxy auth something that belongs in this project, or am I barking up the wrong tree?
Lukasa commentedon Oct 24, 2016
It definitely belongs in this project. =) Unfortunately, I have very little time to tackle writing such a thing, so I'll have to leave this open to someone else who can find that time.
carsonyl commentedon Oct 24, 2016
This would be nice to have! However, Requests doesn't support multiple auth handlers, so it can be a problem if you want to use one auth method for the proxy, and another for the actual request. This is already an issue with HttpNtlmAuth from requests-ntlm, though I don't know if the problem's tracked anywhere.
HttpNtlmAuth also handles NTLM authentication for either a proxy or a website, based on what response header it sees first, which makes it a bit of an oddball.
NurcanSonmez commentedon Jan 3, 2019
Hi everyone! Any ideas how the proxy auth can be done with requests-kerberos?
It's been a while since this ticket is opened, just wanted to check.
NurcanSonmez commentedon Jan 9, 2019
When I use IP address as the auth surrogate in the proxy the following works, however, when I use no surrogate it doesn't work. Just sharing the code in case it'll help others.
import requests from requests_kerberos import HTTPKerberosAuth, REQUIREDPROXY = {'https': 'http://yourproxy:80'}s = requests.Session()response = s.get("http://yourproxy:80",auth=HTTPKerberosAuth(force_preemptive=True))response_cnn = s.get("https://www.cnn.com", proxies=PROXY, verify=False, headers={"Proxy-Authorization": response.request.headers['Authorization']})nametkin commentedon Mar 21, 2020
@NurcanSonmez , Thanks for your code, it was very useful for me when I just ran into this problem. But with requests https, it really doesn't work. Having studied the code of Requests, I realized that the authentication data (that was placed in the request header) does not reach the method "set_tunnel" (module httplib(py2)/http.client(py3)). I used the following code to solve this problem:
Maybe it will be useful for someone.
jborean93 commentedon Nov 29, 2021
Support for proxying
httpendpoints has been added with #148. As mentioned above using this forhttpsendpoints is not supported due to limitations with the underlying libraries that are used. Until this is fixed we can only offer support forhttpendpoints.