momiji / cntlm-gss

Cntlm-0.92.3 with kerberos authentication patch applied

From original fork, here are the changes:

• increase BUFSIZE as 4K is not enough for my usage, had to increase it to 8K
• run in RHEL 7 environments
• was not able to make it work on Windows 10, with or without cygwin

My personal usage:

• write a dedicated krb.conf file for kerberos configuration
• write a dedicated cntlm.conf file for cntlm configuration
• run kinit to authenticate: KRB5_CONFIG=krb.conf kinit USERNAME
• run cntlm-gss: KRB5_CONFIG=krb.conf ./cntlm -c cntlm.conf -a gss -fv

Example of cntlm.conf:

Listen   1234
Proxy    my.proxy.com
NoProxy  localhost, [0-9]*

Example of krb.conf:

[logging]
 default = FILE:krb5libs.log
 kdc = FILE:krb5kdc.log
 admin_server = FILE:kadmind.log

[libdefaults]
 dns_lookup_realm = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 rdns = false
 default_realm = MY.DOMAIN.COM

[realms]
MY.DOMAIN.COM = {
  kdc = ad.my.domain.com
}

[domain_realms]
ad.my.domain.com =  MY.DOMAIN.COM

---

This is Cntlm with Kerberos patch applied.

Works on a Ubuntu 12.04 box, at least for me.

Dependency: Kerberos.

If Kerberos is compiled to a different location, say, $HOME/usr, compile Cntlm with

./configure --enable-kerberos

export LIBRARY_PATH=$HOME/usr/lib

export C_INCLUDE_PATH=$HOME/usr/include

make

To run it, try cntlm --help or cntlm -v and fix whatever it complains.

I have only the following lines in my ctnlm.conf file:

Username	
Domain		
Password	
Proxy		proxy.server.domain.com:3128
NoProxy		localhost, 127.0.0.*, 10.*, 192.168.*
Listen		3128

The username, domain and password are all unset.

I could start it with /home/me/usr/opt/cntlm-0.92.3/cntlm -a gss -c /home/me/usr/opt/cntlm-0.92.3/cntlm.conf .