Skip to content

Commit a545b08

Browse files
committed
add a note on delegation to the README
1 parent 99c2428 commit a545b08

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

README.rst

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -136,6 +136,23 @@ On Windows, WinKerberos is used instead of PyKerberos. WinKerberos allows the
136136
use of arbitrary principals instead of a credential cache. Passwords can be
137137
specified by following the form ``user@realm:password`` for ``principal``.
138138

139+
Delegation
140+
----------
141+
142+
``requests_kerberos`` supports credential delegation (``GSS_C_DELEG_FLAG``).
143+
To enable delegation of credentials to a server that requests delegation, pass
144+
``delegate=True`` to ``HTTPKerberosAuth``:
145+
146+
.. code-block:: python
147+
148+
>>> import requests
149+
>>> from requests_kerberos import HTTPKerberosAuth
150+
>>> r = requests.get("http://example.org", auth=HTTPKerberosAuth(delegate=True))
151+
...
152+
153+
Be careful to only allow delegation to servers you trust as they will be able
154+
to impersonate you using the delegated credentials.
155+
139156
Logging
140157
-------
141158

0 commit comments

Comments
 (0)