# Python SPNEGO Library
[](https://github.com/jborean93/pyspnego/actions/workflows/ci.yml)
[](https://codecov.io/gh/jborean93/pyspnego)
[](https://badge.fury.io/py/pyspnego)
[](https://github.com/jborean93/pyspnego/blob/master/LICENSE)
Library to handle SPNEGO (Negotiate, NTLM, Kerberos) and CredSSP authentication. Also includes a packet parser that can
be used to decode raw NTLM/SPNEGO/Kerberos tokens into a human readable format.
## Requirements
See [How to Install](#how-to-install) for more details
* CPython 3.9+
* [cryptography](https://github.com/pyca/cryptography)
* [sspilib](https://github.com/jborean93/sspilib) - Windows only
### Optional Requirements
The following Python libraries can be installed to add extra features that do not come with the base package:
* [python-gssapi](https://github.com/pythongssapi/python-gssapi) and [pykrb5](https://github.com/jborean93/pykrb5) for Kerberos authentication on Linux
* [ruamel.yaml](https://pypi.org/project/ruamel.yaml/) for YAML output support on `pyspnego-parse`
## How to Install
To install pyspnego with all basic features, run
```bash
pip install pyspnego
```
### Kerberos Authentication
While pyspnego supports Kerberos authentication on Linux, it isn't included by default due to its reliance on system
packages to be present.
To install these packages, run the below
```bash
# Debian/Ubuntu
apt-get install gcc python3-dev libkrb5-dev
# Centos/RHEL/Fedora
dnf install gcc python-devel krb5-devel
# Arch Linux
pacman -S gcc krb5
```
Once installed you can install the Python packages with
```bash
pip install pyspnego[kerberos]
```
Kerberos also needs to be configured to talk to the domain but that is outside the scope of this page.
## How to Use
See [the examples section](docs/examples) for examples on how to use the authentication side of the library.
_Note: While server/acceptor authentication is available for all protocols it is highly recommended you have the system GSSAPI and NTLM system libraries present for acceptor authentication. Pyspnego NTLM acceptor authentication should work but it is not as thoroughly tested as the GSSAPI implementation._
### CredSSP Authentication
Since version 0.2.0, pyspnego can be used for CredSSP authentication. While this isn't part of the SPNEGO/Negotiate
protocol it uses common features and code like ASN.1 structures and even Negotiate auth as part of the CredSSP process.
Both `initiate` and `accept` usages are supported when specifying `protocol='credssp'` but there are no guarantees the
acceptor is free of any bugs so use with caution.
## Backlog
* Add support for anonymous authentication
* See if `pywinrm` wants to use this
Raw data
{
"_id": null,
"home_page": null,
"name": "pyspnego",
"maintainer": null,
"docs_url": null,
"requires_python": ">=3.9",
"maintainer_email": null,
"keywords": "windows, spnego, negotiate, ntlm, kerberos, sspi, gssapi, auth",
"author": null,
"author_email": "Jordan Borean <jborean93@gmail.com>",
"download_url": "https://files.pythonhosted.org/packages/f9/e4/8b32a91aeba6fbc6943a630c44b2fe038615e5c7dec8814316fafdcf4bf4/pyspnego-0.12.0.tar.gz",
"platform": null,
"description": "# Python SPNEGO Library\n\n[](https://github.com/jborean93/pyspnego/actions/workflows/ci.yml)\n[](https://codecov.io/gh/jborean93/pyspnego)\n[](https://badge.fury.io/py/pyspnego)\n[](https://github.com/jborean93/pyspnego/blob/master/LICENSE)\n\nLibrary to handle SPNEGO (Negotiate, NTLM, Kerberos) and CredSSP authentication. Also includes a packet parser that can\nbe used to decode raw NTLM/SPNEGO/Kerberos tokens into a human readable format.\n\n\n## Requirements\n\nSee [How to Install](#how-to-install) for more details\n\n* CPython 3.9+\n* [cryptography](https://github.com/pyca/cryptography)\n* [sspilib](https://github.com/jborean93/sspilib) - Windows only\n\n### Optional Requirements\n\nThe following Python libraries can be installed to add extra features that do not come with the base package:\n\n* [python-gssapi](https://github.com/pythongssapi/python-gssapi) and [pykrb5](https://github.com/jborean93/pykrb5) for Kerberos authentication on Linux\n* [ruamel.yaml](https://pypi.org/project/ruamel.yaml/) for YAML output support on `pyspnego-parse`\n\n\n## How to Install\n\nTo install pyspnego with all basic features, run\n\n```bash\npip install pyspnego\n```\n\n### Kerberos Authentication\n\nWhile pyspnego supports Kerberos authentication on Linux, it isn't included by default due to its reliance on system\npackages to be present.\n\nTo install these packages, run the below\n\n```bash\n# Debian/Ubuntu\napt-get install gcc python3-dev libkrb5-dev\n\n# Centos/RHEL/Fedora\ndnf install gcc python-devel krb5-devel\n\n# Arch Linux\npacman -S gcc krb5\n```\n\nOnce installed you can install the Python packages with\n\n```bash\npip install pyspnego[kerberos]\n```\n\nKerberos also needs to be configured to talk to the domain but that is outside the scope of this page.\n\n## How to Use\n\nSee [the examples section](docs/examples) for examples on how to use the authentication side of the library.\n\n_Note: While server/acceptor authentication is available for all protocols it is highly recommended you have the system GSSAPI and NTLM system libraries present for acceptor authentication. Pyspnego NTLM acceptor authentication should work but it is not as thoroughly tested as the GSSAPI implementation._\n\n\n### CredSSP Authentication\n\nSince version 0.2.0, pyspnego can be used for CredSSP authentication. While this isn't part of the SPNEGO/Negotiate\nprotocol it uses common features and code like ASN.1 structures and even Negotiate auth as part of the CredSSP process.\nBoth `initiate` and `accept` usages are supported when specifying `protocol='credssp'` but there are no guarantees the\nacceptor is free of any bugs so use with caution.\n\n\n## Backlog\n\n* Add support for anonymous authentication\n* See if `pywinrm` wants to use this\n",
"bugtrack_url": null,
"license": null,
"summary": "Windows Negotiate Authentication Client and Server",
"version": "0.12.0",
"project_urls": {
"homepage": "https://github.com/jborean93/pyspnego"
},
"split_keywords": [
"windows",
" spnego",
" negotiate",
" ntlm",
" kerberos",
" sspi",
" gssapi",
" auth"
],
"urls": [
{
"comment_text": null,
"digests": {
"blake2b_256": "01e995430b8f3b747ebd3b86a66484a79ef387167655bcb15ab416f563045565",
"md5": "4a17d3f6354b26c4e275bc095fc9f025",
"sha256": "84cc8dae6ad21e04b37c50c1d3c743f05f193e39498f6010cc68ec1146afd007"
},
"downloads": -1,
"filename": "pyspnego-0.12.0-py3-none-any.whl",
"has_sig": false,
"md5_digest": "4a17d3f6354b26c4e275bc095fc9f025",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": ">=3.9",
"size": 130180,
"upload_time": "2025-09-02T18:51:04",
"upload_time_iso_8601": "2025-09-02T18:51:04.938856Z",
"url": "https://files.pythonhosted.org/packages/01/e9/95430b8f3b747ebd3b86a66484a79ef387167655bcb15ab416f563045565/pyspnego-0.12.0-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": null,
"digests": {
"blake2b_256": "f9e48b32a91aeba6fbc6943a630c44b2fe038615e5c7dec8814316fafdcf4bf4",
"md5": "f1e4eb073641fc00dfd0ce053963c73b",
"sha256": "e1d9cd3520a87a1d6db8d68783b17edc4e1464eae3d51ead411a51c82dbaae67"
},
"downloads": -1,
"filename": "pyspnego-0.12.0.tar.gz",
"has_sig": false,
"md5_digest": "f1e4eb073641fc00dfd0ce053963c73b",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.9",
"size": 225764,
"upload_time": "2025-09-02T18:51:06",
"upload_time_iso_8601": "2025-09-02T18:51:06.858808Z",
"url": "https://files.pythonhosted.org/packages/f9/e4/8b32a91aeba6fbc6943a630c44b2fe038615e5c7dec8814316fafdcf4bf4/pyspnego-0.12.0.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2025-09-02 18:51:06",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "jborean93",
"github_project": "pyspnego",
"travis_ci": false,
"coveralls": true,
"github_actions": true,
"lcname": "pyspnego"
}
JSON
