v0.3.1

0.3.1 - 2021-10-29

• Do not convert GSSAPI service to lowercase for GSSAPI and uppercase for SSPI
  • SPNs are case insensitive on Windows but case sensitive on Linux
  • Convering the service portion to upper or lower case could cause problems finding the target server on non-Windows GSSAPI implementations

v0.3.0

0.3.0 - 2021-10-19

Packaging Changes

• Changed project structure to a src layout
• Include both Cython pyx/pyd and C files for SSPI in the sdist generated
• Added Python 3.10 wheel

Bugfixes

• Ensure bad SPNEGO token inputs are raised as InvalidTokenError rather than struct.error

v0.2.0

0.2.0 - 2021-09-22

Breaking Changes

• Drop support for Python 2.7 and 3.5 - new minimum is 3.6+
• Made the gss, negotiate, ntlm, sspi exports private, use the spnego.client and spnego.server functions instead
  • A deprecation warning is raised when importing from these package directly and this will be removed in the next major release

Features

• Added support for CredSSP authentication using protocol='credssp'
• Allow optional keyword arguments to be used with spnego.client and spnego.server to control authentication specific options

Bugfixes

• Use Kerberos API to acquire Kerberos credential to get a forwardable token in a thread safe manner
• Fix default credential logic when no username is provided based on GSSAPI rules rather than just the default principal - #15
• Ignore SPNEGO mechListMIC if it contains the same value as the responseToken due to an old Windows SPNEGO logic bug - https://github.com/krb5/krb5/blob/3f5a348287646d65700854650fe668b9c4249013/src/lib/gssapi/spnego/spnego_mech.c#L3734-L3744
• Do not use SSPI when auth='ntlm' and the password is in the form {lm_hash}:{nt_hash}

0.1.6 - 2021-05-07

• This will be the last release that supports Python 2.7 and 3.5
• Change enum type of iov.BufferType to IntEnum to fix load on Python 3.10 - #10
• Make pyspnego-parse and entry point which uses __main__.py in the spnego package
  • This allows Windows (and Linux) users to use the parser script by running python -m spnego --token ...

0.1.5 - 2021-01-12

• Respect NETBIOS_COMPUTER_NAME when getting the workstation name for NTLM tokens. This matches the behaviour of gss-ntlmssp to ensure a consistent approach.

v0.1.4

0.1.4 - 2020-12-02

• Only send negState: request-mic for the first reply from an acceptor for Negotiate auth.
  • Strict interpretations of SPNEGO will fail if the initiator sends this state as it is against the RFC.

v0.1.3

0.1.3 - 2020-10-29

• Added Python 3.9 to CI and build Windows wheel for this versoin

v0.1.2

0.1.2 - 2020-10-01

• Fix up WinRM wrapping on SSPI

v0.1.1

• Include the cython files in the built sdist

Initial Release

Initial release of pyspnego