Skip to content

Instantly share code, notes, and snippets.

@dzmitry-savitski

dzmitry-savitski/gss.groovy

Created March 31, 2025 20:56
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save dzmitry-savitski/f49997cb5cc8e8d41ad27a51ecd3692d to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save dzmitry-savitski/f49997cb5cc8e8d41ad27a51ecd3692d to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. dzmitry-savitski created this gist Mar 31, 2025.
    42 changes: 42 additions & 0 deletions gss.groovy
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,42 @@
    import javax.security.auth.login.LoginContext
    import javax.security.auth.login.Configuration
    import javax.security.auth.callback.*
    import com.sun.security.auth.callback.TextCallbackHandler

    class PasswordCallbackHandler implements CallbackHandler {
    private String username
    private String password

    PasswordCallbackHandler(String username, String password) {
    this.username = username
    this.password = password
    }

    void handle(Callback[] callbacks) {
    callbacks.each { callback ->
    if (callback instanceof NameCallback) {
    callback.setName(username)
    } else if (callback instanceof PasswordCallback) {
    callback.setPassword(password.toCharArray())
    } else {
    throw new UnsupportedCallbackException(callback, "Unsupported callback")
    }
    }
    }
    }

    // Set system properties for Kerberos config
    System.setProperty("java.security.krb5.conf", "/etc/krb5.conf") // adjust for your OS
    System.setProperty("java.security.auth.login.config", "login.conf")
    System.setProperty("javax.security.auth.useSubjectCredsOnly", "false")

    def username = "HTTP/service.domain.com@YOUR.REALM"
    def password = "yourSPNPassword"

    try {
    def loginContext = new LoginContext("KrbLogin", new PasswordCallbackHandler(username, password))
    loginContext.login()
    println "✅ Authentication successful"
    } catch (Exception e) {
    println "❌ Authentication failed: ${e.message}"
    }