ruby 使用rkerberos gem对使用Kerberos的用户进行身份验证，并将凭据存储在默认文件缓存中。不是

Posted 2021-05-16

# Assumes a working krb5 setup with /etc/krb5.conf.

# Doesn't seeem to work without username and realm.
cc = Kerberos::Krb5::CredentialsCache.new('[e-mail]')
# /tmp/krb5cc_1000 now exists. klist just shows principals.

k = Kerberos::Krb5.new
k.get_init_creds_keytab('jslatter', 'krb5.keytab', nil, cc)
# klist shows creds.

cc.destroy
# /tmp/krb5cc_1000 is gone.