{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/4566","labels_url":"https://api.github.com/repos/openshift/origin/issues/4566/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/4566/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/4566/events","html_url":"https://github.com/openshift/origin/pull/4566","id":105294140,"number":4566,"title":"WIP - Kerberize oc","user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-09-08T03:35:21Z","updated_at":"2015-10-11T18:32:03Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/4566","html_url":"https://github.com/openshift/origin/pull/4566","diff_url":"https://github.com/openshift/origin/pull/4566.diff","patch_url":"https://github.com/openshift/origin/pull/4566.patch"},"body":"- [x] Add `CompleteChallenge` to challenge handler interface\r\n- [x] Select challenge handler from list of optional handlers\r\n- [x] Implement negotiate handler\r\n- [x] Cross-platform/cgo build issues - building for linux only right now\r\n- [ ] Decide how a challenge handler is chosen\r\n  * recognition of WWW-Authenticate challenge?\r\n  * should an error attempt to use another challenge handler?\r\n- [ ] Unit tests\r\n- [ ] Integration test\r\n\r\nTo test, run the liggitt/auth-proxy docker image following the instructions at https://github.com/liggitt/auth-proxy/\r\n\r\nSet up your local Kerberos and browser to point `mydomain.com` to the running container.\r\n\r\nSet an an identity provider like this:\r\n```\r\n  identityProviders:\r\n  - challenge: true\r\n    login: true\r\n    name: header\r\n    provider:\r\n      apiVersion: v1\r\n      challengeURL: \"http://mydomain.com/negotiate/oauth/authorize?${query}\"\r\n      loginURL:     \"http://mydomain.com/negotiate/oauth/authorize?${query}\"\r\n      kind: RequestHeaderIdentityProvider\r\n      headers:\r\n      - Remote-User\r\n```\r\n\r\nWhen you have an active Kerberos ticket, `oc login` and browser login should succeed automatically. When you don't, you should get authorization errors on login."},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/147233556","html_url":"https://github.com/openshift/origin/pull/4566#issuecomment-147233556","issue_url":"https://api.github.com/repos/openshift/origin/issues/4566","id":147233556,"user":{"login":"smarterclayton","id":1163175,"avatar_url":"https://avatars.githubusercontent.com/u/1163175?v=3","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},"created_at":"2015-10-11T18:32:03Z","updated_at":"2015-10-11T18:32:03Z","body":"Lets just not support 386 for now.  It's only in at grants request for\norigin.\n\nOn Oct 11, 2015, at 2:08 AM, Jordan Liggitt <notifications@github.com>\nwrote:\n\noh, nm, it's a cross-compile issue for cgo. linux/amd64 happens to work\nbecause that's the platform Jenkins runs on\n\n—\nReply to this email directly or view it on GitHub\n<https://github.com/openshift/origin/pull/4566#issuecomment-147161471>.\n"}}