summaryrefslogtreecommitdiffstats
path: root/tests/t_spnego_proxy.py
diff options
context:
space:
mode:
Diffstat (limited to 'tests/t_spnego_proxy.py')
-rwxr-xr-xtests/t_spnego_proxy.py35
1 files changed, 35 insertions, 0 deletions
diff --git a/tests/t_spnego_proxy.py b/tests/t_spnego_proxy.py
new file mode 100755
index 0000000..e2ac7f9
--- /dev/null
+++ b/tests/t_spnego_proxy.py
@@ -0,0 +1,35 @@
+#!/usr/bin/python
+# Copyright (C) 2015 - mod_auth_gssapi contributors, see COPYING for license.
+
+import os
+import requests
+import gssapi
+from base64 import b64encode
+
+def getAuthToken(target):
+ spnego_mech = gssapi.raw.OID.from_int_seq('1.3.6.1.5.5.2')
+
+ name = gssapi.Name('HTTP@%s' % target,
+ gssapi.NameType.hostbased_service)
+
+ ctx = gssapi.SecurityContext(name=name, mech=spnego_mech)
+ token = ctx.step()
+
+ return 'Negotiate %s' % b64encode(token)
+
+
+if __name__ == '__main__':
+ s = requests.Session()
+
+ target = os.environ['NSS_WRAPPER_HOSTNAME']
+ url = 'http://%s/spnego/' % target
+
+ proxy = 'http://%s:%s' % (target, os.environ['WRAP_PROXY_PORT'])
+ proxies = { "http" : proxy, }
+
+ s.headers.update({'Proxy-Authorization': getAuthToken(target)})
+ s.headers.update({'Authorization': getAuthToken(target)})
+
+ r = s.get(url, proxies=proxies)
+ if r.status_code != 200:
+ raise ValueError('Spnego Proxy Auth Failed')