krb5

What's Changed

• Update Python dep and Cython requirements by @jborean93 in #67

0.8.0 - 2025-09-01

• Require Python 3.9 or newer (dropped 3.8)
• Pin Cython build requirements to 3.1.3 for enabling deterministic builds per release

Full Changelog: v0.7.1...v0.8.0

What's Changed

• Fix k5test minimum version requirement by @carlwgeorge in #58
• Fix Cython 0.29.x build support by @jborean93 in #59
• Update macOS runners on CI by @jborean93 in #62

0.7.1 - 2025-03-06

• Fix up Cython 0.29.x support when building the library

Full Changelog: v0.7.0...v0.7.1

What's Changed

• password change functionality by @zarganum in #50
• Bump version and update CHANGELOG by @jborean93 in #51
• do not decode result_string returned by set_password by @zarganum in #52
• Update min Python to 3.8 and added 3.13 wheel by @jborean93 in #54
• set_password extended server response processing by @zarganum in #53
• Prepare for v0.7.0 release by @jborean93 in #55

0.7.0 - 2024-10-03

• Require Python 3.8 or newer (dropped 3.7)
• Added Python 3.13 wheel for macOS
• Added password management APIs
  • krb5_chpw_message
  • krb5_set_password
  • krb5_set_password_using_ccache

Full Changelog: v0.6.0...v0.7.0

What's Changed

• Bump version by @jborean93 in #31
• Exclude header files from package data by @carlwgeorge in #32
• Add changelog for .h site-package fix by @jborean93 in #33
• Update CI by @jborean93 in #41
• Add krb5_cc_set_config() and krb5_cc_get_config() by @steffen-kiess in #37
• Add set_real_time(), timeofday(), us_timeofday() and get_time_offsets() by @steffen-kiess in #38
• Add krb5_get_renewed_creds() and krb5_get_validated_creds() by @steffen-kiess in #40
• Add krb5.build_principal() and add accessors for Principal class by @steffen-kiess in #39
• Add get_etype_info() and c_string_to_key() by @steffen-kiess in #42
• Add TicketFlags class and Creds.ticket_flags attribute by @steffen-kiess in #43
• Creds serialization and deserialization by @zarganum in #45
• Update changelog and version by @jborean93 in #46
• Cleanup cred implementation by @jborean93 in #47
• Prepare for v0.6.0 release by @jborean93 in #48

0.6.0 - 2024-07-22

• Fix up wheel package build to not include uneeded python_krb5.h file in the final site-packages install dir
• Added CCache APIs:
  • krb5_cc_get_config
  • krb5_cc_set_config
• Added Context APIs:
  • krb5_set_real_time
  • krb5_timeofday
  • krb5_us_timeofday
  • MIT only
  • krb5_get_time_offsets
• Added Credential APIs:
  • krb5_get_renewed_creds
  • MIT only
  • krb5_get_etype_info
  • krb5_get_validated_creds
  • MIT 1.20+ only
  • krb5_marshal_credentials
  • krb5_unmarshal_credentials
• Added KeyBlock APIs:
  • MIT only
  • krb5_c_string_to_key
• Added Principal APIs:
  • [krb5_build_principal]https://web.mit.edu/kerberos/krb5-devel/doc/appdev/refs/api/krb5_build_principal.html)
• Added the following properties to the Creds object:
  • ticket_flags_raw - Flags in the ticket as returned by the C API
  • ticket_flags - Flags in the ticket converted to a known enum value
• Added the following properties to the Principal object:
  • realm - The realm of the principal
  • components - The list of name components.
  • type - The name type of the principal.

New Contributors

• @carlwgeorge made their first contribution in #32
• @zarganum made their first contribution in #45

Full Changelog: v0.5.1...v0.6.0

What's Changed

• Declare the function as noexcept when it is not raising exception. by @matusvalo in #27
• Use OIDC for PyPI releases by @jborean93 in #28
• Added support for Cython 3 in build requirements by @jborean93 in #29
• Added Python 3.12 wheels by @jborean93 in #30

0.5.1 - 2023-08-29

• Added support for Cython 3.x.y when building the extension modules
• Added Python 3.12 wheel for macOS

New Contributors

• @matusvalo made their first contribution in #27

Full Changelog: v0.5.0...v0.5.1

0.5.0 - 2023-02-20

• Added exception that is raised when krb5.init_context() failed
• Moved back to setup.cfg based setuptools project for compatibility with pip present on system distributions
• Added the following properties to the Creds object:
  • client - A copy of the credential's client principal
  • server - A copy of the credential's server principal
  • keyblock - A copy of the credential's session encryption key info
  • times - A copy of the credential's lifetime info including the auth time, star time, end time, and renewal time
  • ticket - A copy of the credential's ticket data
  • second_ticket - A copy of the credential's second ticket data (DUPLICATE-SKEY or ENC-TKT-IN-SKEY)
• Added CCache APIs:
  • krb5_cc_remove_cred
  • krb5_cc_retrieve_cred
• Added Keyblock APIs:
  • krb5_copy_keyblock

What's Changed

• Fix up CI to use wheel during test by @jborean93 in #20
• Have krb5.init_context() raise an exception on error. by @pseudometric in #22
• Move back to using setup.cfg by @jborean93 in #24
• Add krb5_cc_retrieve_cred() and krb5_cc_remove_cred() by @steffen-kiess in #23
• Implement properties for Creds by @steffen-kiess in #25

New Contributors

• @pseudometric made their first contribution in #22
• @steffen-kiess made their first contribution in #23

Full Changelog: v0.4.1...v0.5.0

0.4.1 - 2022-10-25

• Added Python 3.11 wheel

0.4.0 - 2022-08-09

• Require Python 3.7 or newer (dropped 3.6)
• Created PEP 517 compliant package
• Moved all setuptools configuration, except extension information, to pyproject.toml
• Will no longer include the cythonised .c files in the sdist making Cython a build requirement
  • With PEP 517 this requirement will be automatically satisfied making this a non-breaking change for people using PEP 517 features

0.3.0 - 2022-02-16

• Added CCache APIs:
  • krb5_cc_set_default_name
  • krb5_cc_start_seq_get
  • krb5_cc_next_cred
  • krb5_cc_end_seq_get
• CCaches can be iterated to get each credential entry in the cache.
• Added Keytab management APIs:
  • krb5_kt_add_entry
  • krb5_kt_get_entry
  • krb5_kt_have_content
  • krb5_kt_read_service_key
  • krb5_kt_remove_entry
  • krb5_kt_start_seq_get
  • krb5_kt_next_entry
  • krb5_kt_end_seq_get
• Keytabs can be iterated to get each entry in the keytab.
• Added KeyBlock management APIs:
  • krb5_init_keyblock
  • Due to differences between MIT and Heimdal this function reflects krb5_keyblock_init in Heimdal where the data is copied to the keyblock on creation
• Added credential options APIs:
  • krb5_get_init_creds_opt_set_anonymous
  • krb5_get_init_creds_opt_set_etype_list
  • krb5_get_init_creds_opt_set_in_ccache - MIT 1.11 or newer
  • krb5_get_init_creds_opt_set_pac_request - Heimdal or MIT 1.15
  • krb5_get_init_creds_opt_set_proxiable
  • krb5_get_init_creds_opt_set_renew_life
  • krb5_get_init_creds_opt_set_tkt_life
  • krb5_get_init_creds_opt_set_fast_ccache - MIT only
  • krb5_get_init_creds_opt_set_fast_ccache_name - MIT only
  • krb5_get_init_creds_opt_set_fast_flags - MIT only
  • krb5_get_init_creds_opt_set_pa - MIT only
  • krb5_get_init_creds_opt_set_salt
• Added miscellaneous APIs:
  • krb5_copy_principal
  • krb5_string_to_enctype
  • krb5_enctype_to_string
  • krb5_enctype_to_name - MIT only

0.2.0 - 2021-10-18

• Added krb5_cc_switch
  • Used to switch the primary credential cache in a collection credential cache
• Added krb5_cc_support_switch
  • Used to detect if a credential cache type, like FILE, DIR, supports switching with krb5_cc_switch
• Added krb5_cc_cache_match
  • Retrieve the credential cache inside a collection for the principal specified

0.1.2 - 2021-10-06

• Added Python 3.10 wheels

• 0.1.0 was taken during registration, use this as the initial release instead

Initial release