Library to handle SPNEGO (Negotiate, NTLM, Kerberos) and CredSSP authentication. Also includes a packet parser that can be used to decode raw NTLM/SPNEGO/Kerberos tokens into a human readable format.
See How to Install for more details
The following Python libraries can be installed to add extra features that do not come with the base package:
pyspnego-parseTo install pyspnego with all basic features, run
pip install pyspnego
While pyspnego supports Kerberos authentication on Linux, it isn't included by default due to its reliance on system packages to be present.
To install these packages, run the below
# Debian/Ubuntu
apt-get install gcc python3-dev libkrb5-dev
# Centos/RHEL
yum install gcc python-devel krb5-devel
# Fedora
dnf install gcc python-devel krb5-devel
# Arch Linux
pacman -S gcc krb5
Once installed you can install the Python packages with
pip install pyspnego[kerberos]
Kerberos also needs to be configured to talk to the domain but that is outside the scope of this page.
See the examples section for examples on how to use the authentication side of the library.
Note: While server/acceptor authentication is available for all protocols it is highly recommended you have the system GSSAPI and NTLM system libraries present for acceptor authentication. Pyspnego NTLM acceptor authentication should work but it is not as thoroughly tested as the GSSAPI implementation.
Since version 0.2.0, pyspnego can be used for CredSSP authentication. While this isn't part of the SPNEGO/Negotiate
protocol it uses common features and code like ASN.1 structures and even Negotiate auth as part of the CredSSP process.
Both initiate and accept usages are supported when specifying protocol='credssp' but there are no guarantees the
acceptor is free of any bugs so use with caution.
pywinrm wants to use thisFAQs
Windows Negotiate Authentication Client and Server
We found that pyspnego demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI confirms no security flaws were exploited in the Ultralytics supply chain attack and highlights improvements for safer package publishing.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.