gssapi

A native Kerberos client implementation for Python on Windows

Pure Go Kerberos 5 library for clients and services

Kerberos library for node.js

Obtain Active Directory Kerberos tickets on Linux without domain join or storing user passwords, using AD CS enrollment-on-behalf-of and PKINIT for unattended automation.

GSSAPI authentication plug-in for HTTPie

Heimdal

A http proxy which can evaluate PAC files and forward to the correct parent proxy with authentication

A tool to probe all authentication methods against MSLDAP services for troubleshooting/research/study purposes.

Native Node.js LDAP client for OpenLDAP and Active Directory, ldapts-compatible with SASL/Kerberos/GSSAPI support

Kerbernetes is a Kubernetes authentication service that integrates with Kerberos and LDAP for secure access control.

A proxy for GSSAPI | Docs at https://github.com/gssapi/gssproxy/tree/main/docs

Pure Rust Kerberos V5: GSSAPI, SPNEGO, PKINIT. No C FFI, no system krb5 dependency.

A Python interface to RFC 2743/2744 (plus common extensions)

Reproducible Docker lab for the Apache Tomcat JNDIRealm GSSAPI authentication bypass

Golang library providing a GSSAPI wrapper around gokrb5

Golang library providing GSSAPI middleware for crypto/ssh

Golang library to support additional TSIG methods for DNS queries

Kerberos-first web UI for Apache Kafka with RBAC, multi-cluster support, and controlled admin flows

Kafka cluster validation utility with Kerberos-first support for connectivity, topic lifecycle, produce/consume checks, and operational test reporting.

Minimal .NET 10 Linux container example proving Kerberos authentication to Active Directory over LDAP using a keytab. Designed as a known-good baseline for debugging AD/Kerberos connectivity issues.