Add test for Proxy SPNEGO auth

[iboukris]

The Authorization headers are initially added (generated by gssapi module).

As discussed at #48

Thanks,
Isaac B.

[iboukris]

Hi Simo,

I am having some troubles with SPNEGO using python-gssapi module.

The following cause "Segmentation fault (core dumped)" when I run it.

def getAuthToken(target):
    spnego_mech = gssapi.raw.OID.from_int_seq('1.3.6.1.5.5.2')

    name = gssapi.Name('HTTP@%s' % target,
                       gssapi.NameType.hostbased_service)

    ctx = gssapi.SecurityContext(name=name, mech=spnego_mech)
    token = ctx.step()

    return 'Negotiate %s' % b64encode(token)

Any idea what I do wrong?
Do you think it is worth pursuing or I could embed a little C code to do the job?

BTW note that when we use 'HTTPKerberosAuth' in 't_spnego.py' it also generates a KRB5 token rather than SPNEGO one.

Thanks!

[iboukris]

BTW2 - it seem to work fine when the OID is KRB5 - '1.2.840.113554.1.2.2'

[simo5]

Can you send me privately a backtrace when it segfaults ?

[iboukris]

As the python fix was accepted upstream, I have added a commit to use SPNEGO indeed.
We might want to use the same technique in 't_spnego' as well.

[iboukris]

Oups, deleted the branch by mistake and restored it - sorry.