Add way to return Kerberos nameid if available

[cascardo/ipsilon.git] / ipsilon / login / authkrb.py

diff --git a/ipsilon/login/authkrb.py b/ipsilon/login/authkrb.py
index b6ff99c..77b907b 100755 (executable)
--- a/ipsilon/login/authkrb.py
+++ b/ipsilon/login/authkrb.py
@@ -18,6 +18,7 @@
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
 from ipsilon.login.common import LoginPageBase, LoginManagerBase
+from ipsilon.util.user import UserSession
 import cherrypy
 
 
@@ -33,9 +34,10 @@ class KrbAuth(LoginPageBase):
 
     def root(self, *args, **kwargs):
         # If we can get here, we must be authenticated and remote_user
-        # was set. Check the session has a use set already or error.
+        # was set. Check the session has a user set already or error.
         if self.user and self.user.name:
-            return self.lm.auth_successful(self.user.name)
+            userdata = { 'krb_principal_name': self.user.name }
+            return self.lm.auth_successful(self.user.name, userdata)
         else:
             return self.lm.auth_failed()