Struct AdminGssapiConfig 

pub struct AdminGssapiConfig {
    pub keytab_file: Option<String>,
    pub service_name: String,
    pub gssproxy: bool,
    pub require_crypto_verification: bool,
}

GSSAPI/SPNEGO configuration for admin authentication.

Fields

keytab_file: Option<String>

Path to the Kerberos keytab file.

service_name: String

Service principal name. Default: "HTTP" (the hostname is appended automatically).

gssproxy: bool

Use gssproxy for credential management instead of a keytab.

require_crypto_verification: bool

Require cryptographic verification of Kerberos tickets.

When true (the default), GSSAPI authentication is rejected unless libgssapi integration is compiled in and a valid keytab/gssproxy is available to decrypt and verify the ticket. When false, structural parsing of the SPNEGO token is allowed — the service name (sname) is extracted from the cleartext portion of the ticket, but no cryptographic verification is performed and the client identity cannot be authenticated.

Security warning: Setting this to false should only be used for development, logging, or environments where TLS client certificates provide the primary authentication.

Trait Implementations

impl Clone for AdminGssapiConfig

fn clone(&self) -> AdminGssapiConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AdminGssapiConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AdminGssapiConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.