[PROPOSAL] Replace requests_kerberos package with requests_gssapi

[spapadop]

What are you proposing?

Kerberos authentication can be achieved by using either request_kerberos or requests_gssapi.

Currently, the former is listed as dependency, on setup.py.

As per redhat release notes python-kerberos is suggested to be replaced by python-gssapi.

What problems are you trying to solve?

User authentication with Kerberos.

What is the developer/user experience going to be?

Instead of this:

from opensearchpy import OpenSearch, RequestsHttpConnection
from requests_kerberos import HTTPKerberosAuth, OPTIONAL

client = OpenSearch(
    hosts=['https://...'],
    use_ssl=True,
    verify_certs=True,
    http_auth=HTTPKerberosAuth(mutual_authentication=OPTIONAL)
)

health = client.cluster.health()

people need to do this:

from opensearchpy import OpenSearch, RequestsHttpConnection
from requests_gssapi import HTTPSPNEGOAuth, OPTIONAL

client = OpenSearch(
    hosts=['https://...'],
    use_ssl=True,
    verify_certs=True,
    connection_class=RequestsHttpConnection,
    http_auth=HTTPSPNEGOAuth(mutual_authentication=OPTIONAL),
)

health = client.cluster.health()

If you agree, I can raise a PR to implement this change on the codebase.

[harshavamsi]

Looks like python-kerberos hasn't been updated in a while, @spapadop your contributions would be welcome!

[cwperks]

Catch All Triage - 1 2 3

@spapadop thank you for the detailed issue!