Support calling kinit to get Kerberos ticket during DAST scan
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Problem
DASTs Windows integration authentication support (Kerberos) required the user to supply a before_script that calls kinit to authenticate against the KDC. This is something that should be performed automatically by DAST if the Kerberos variables are in use.
Proposal
- If
DAST_AUTH_KERBEROS_REALMandDAST_AUTH_KERBEROS_DCare set, andDAST_AUTH_TYPEisbasic-digestcallkinit - Call
kinit $DAST_AUTH_USERNAMEand supply$DAST_AUTH_USERNAME\nas the input. - Check to make sure return code is correct otherwise treat as error and exit.
Edited by 🤖 GitLab Bot 🤖