manishka/cntlm-gss-docker repository overview

⁠cntlm-gss-docker

• cntlm with kerberos patch in a docker container

• cntlm v0.92.3 source code⁠ and kerberos patch⁠ were both obtained from sourceforge⁠.

• some modification was made to Makefile to allow patch to be applied see commit ae4cb8d6⁠

• patch was applied using below command after the Makefile was modified.

  git apply -p0 --ignore-whitespace --directory=cntlm-0.92.3 \
  201211-cntlm-kerberos-authentication.patch 
  

  Copy

⁠Build the container

docker build -t cntlm-gss-docker:0.92.3 .

⁠Run the container

docker run -it -v ${PWD}/cntlm.conf:/etc/cntlm.conf -p 53128:3128 cntlm-gss-docker:0.92.3  -a ntlmv2

Once the container is running, use http://localhost:53128 as your proxy on your host.

⁠Sample contents of ${PWD}/cntlm.conf

Username    username
Domain      DOMAIN.EXAMPLE.ORG
Password
Proxy       parent.proxy.example.org:8080
NoProxy     localhost, 127.0.0.*, 10.*, 192.168.*
Listen      0.0.0.0:3128
Auth            NTLMv2
PassNTLMv2      hashed-ntlm-passwrd