mongo_kerberos 2.0.0-java → 2.1.2-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 6a9ff251151854f967f0d97901b5bd4fe2ab76a4
-  data.tar.gz: 46530ece51a572a9269f69832bffe616d7b622aa
+SHA256:
+  metadata.gz: 8cf3700bd35015425989ab2f24c440185980fdab1ca76c18ee60f388405ffe52
+  data.tar.gz: 69303947c3276f695b3031c372a50bc349ba5ea41de6233bc5f6b815cb811b92
 SHA512:
-  metadata.gz: a066415e7c71104ea962038a1a0670208b33f0177b1166c9b86ee6bac97448fda38b199667a8aeaa0dc38ec6d2c083db0f5ad435d97cc791e97b2bcbbb0bdac9
-  data.tar.gz: d1ebdaee27fff4fea13004cf9a595ee9ef3ee9ddc75555253d51c30a0a1b475e1eeb19053491fc365d346bbefb224f8791247df17c442652ff27f07171765979
+  metadata.gz: fcdb67c5716208cdd86127d174144728c055c312b67ad5d8a4000ef1af802346c78e03b22fbc63e50cee9137aa97e49bbef1d88f74b6492e8cf9f1d6cb3f28a3
+  data.tar.gz: 01fcf1114072578921d276db0f48608be25b4de9436c20112f20055bf498a38f7b682a37336109b8dea00f869d0baa48fc372e4bf0eaf8650b997fefb2418147

data/CONTRIBUTING.md

@@ -21,8 +21,6 @@ specs should follow the following guidelines:
 - Use `context` blocks to set up conditions.
 - Always provide descriptive specifications via `it`.
 
-Specs can be automatically run with Guard, via `bundle exec guard`
-
 Before commiting, run `rake` to ensure all specs pass with both pure Ruby and
 the native extensions.
 

data/README.md

@@ -1,15 +1,21 @@
-Mongo Kerberos [![Build Status](https://secure.travis-ci.org/mongodb/mongo-ruby-kerberos.png?branch=master&.png)](http://travis-ci.org/mongodb/mongo-ruby-kerberos) [![Code Climate](https://codeclimate.com/github/mongodb/mongo-ruby-kerberos.png)](https://codeclimate.com/github/mongodb/mongo-ruby-kerberos) [![Coverage Status](https://coveralls.io/repos/mongodb/mongo-ruby-kerberos/badge.png?branch=master)](https://coveralls.io/r/mongodb/mongo-ruby-kerberos?branch=master)
-====
+# Mongo Kerberos
 
 Provides Kerberos authentication support to the Mongo Ruby Driver.
 
-Compatibility
--------------
 
-mongo_kerberos is tested against MRI (1.9.2+) and JRuby (1.7.0+)
+## Compatibility
 
-Installation
-------------
+mongo_kerberos is tested against MRI (2.7+) and JRuby (9.3+).
+
+### JRuby
+
+In order to work with Kerberos TGTs that are in the system cache (e.g. obtained with `kinit`), the
+JRuby extension sets the JVM system property "sun.security.jgss.native" to "true". Note that any
+other use of the JGSS library will also be affected by this setting, meaning that any TGTs in the
+system cache will be available for obtaining Kerberos credentials as well.
+
+
+## Installation
 
 libsasl is a requirement to be able to install the mongo_kerberos gem. Please see the
 [Cyrus documentation](http://cyrusimap.web.cmu.edu/docs/cyrus-sasl/2.1.25/) for more
@@ -18,7 +24,7 @@ information.
 With bundler, add the `mongo_kerberos` gem to your `Gemfile`.
 
 ```ruby
-gem "mongo_kerberos", "~> 2.0"
+gem "mongo_kerberos", "~> 2.1"
 ```
 
 Require the `mongo_kerberos` gem in your application.
@@ -27,17 +33,38 @@ Require the `mongo_kerberos` gem in your application.
 require "mongo_kerberos"
 ```
 
-Usage
------
+### Release Integrity
+
+Each release of this Kerberos authentication module after version 2.1.1 has been automatically built and signed using the team's GPG key.
+
+To verify the module's gem file:
+
+1. [Download the GPG key](https://pgp.mongodb.com/ruby-driver.asc).
+2. Import the key into your GPG keyring with `gpg --import ruby-driver.asc`.
+3. Download the gem file (if you don't already have it). You can download it from RubyGems with `gem fetch mongo_kerberos`, or you can download it from the [releases page](https://github.com/mongodb/mongo-ruby-kerberos/releases) on GitHub.
+4. Download the corresponding detached signature file from the [same release](https://github.com/mongodb/mongo-ruby-kerberos/releases). Look at the bottom of the release that corresponds to the gem file, under the 'Assets' list, for a `.sig` file with the same version number as the gem you wish to install.
+5. Verify the gem with `gpg --verify mongo_kerberos-X.Y.Z.gem.sig mongo_kerberos-X.Y.Z.gem` (replacing `X.Y.Z` with the actual version number).
+
+You are looking for text like "Good signature from "MongoDB Ruby Driver Release Signing Key <packaging@mongodb.com>" in the output. If you see that, the signature was found to correspond to the given gem file.
+
+(Note that other output, like "This key is not certified with a trusted signature!", is related to *web of trust* and depends on how strongly you, personally, trust the `ruby-driver.asc` key that you downloaded from us. To learn more, see https://www.gnupg.org/gph/en/manual/x334.html)
+
+### Why not use RubyGems' gem-signing functionality?
+
+RubyGems' own gem signing is problematic, most significantly because there is no established chain of trust related to the keys used to sign gems. RubyGems' own documentation admits that "this method of signing gems is not widely used" (see https://guides.rubygems.org/security/). Discussions about this in the RubyGems community have been off-and-on for more than a decade, and while a solution will eventually arrive, we have settled on using GPG instead for the following reasons:
+
+1. Many of the other driver teams at MongoDB are using GPG to sign their product releases. Consistency with the other teams means that we can reuse existing tooling for our own product releases.
+2. GPG is widely available and has existing tools and procedures for dealing with web of trust (though they are admittedly quite arcane and intimidating to the uninitiated, unfortunately).
+
+Ultimately, most users do not bother to verify gems, and will not be impacted by our choice of GPG over RubyGems' native method.
 
 
-API Documentation
------------------
+## API Documentation
 
-The [API Documentation](http://rdoc.info/github/mongodb/mongo-ruby-kerberos/master/frames) is
-located at rdoc.info.
+Please see the [Kerberos authentication section](https://www.mongodb.com/docs/ruby-driver/current/reference/authentication/#kerberos--gssapi-)
+of the Ruby driver documentation for high level documentation of this library.
 
-Versioning
-----------
+## Versioning
 
-As of 2.0.0, this project adheres to the [Semantic Versioning Specification](http://semver.org/).
+As of 2.1.0, this project adheres to the
+[Semantic Versioning Specification](http://semver.org/).

data/Rakefile

@@ -31,40 +31,88 @@ if jruby?
     ext.name = "native"
     ext.ext_dir = "src"
     ext.lib_dir = "lib/mongo/auth/kerberos"
+    ext.release = ENV['JAVA_RELEASE'].to_i if ENV['JAVA_RELEASE']
   end
 else
   require "rake/extensiontask"
   Rake::ExtensionTask.new do |ext|
-    ext.name = "native"
-    ext.ext_dir = "ext/mongo/kerberos"
-    ext.lib_dir = "lib/mongo/auth/kerberos"
+    ext.name = "mongo_kerberos_native"
+    ext.ext_dir = "ext/mongo_kerberos"
+    ext.lib_dir = "lib"
   end
 end
 
-require "mongo/auth/kerberos/version"
+desc "[INTERNAL] Loads the library's version"
+task :load_version do
+  require 'mongo/auth/kerberos/version'
+end
 
-def extension
-  RUBY_PLATFORM =~ /darwin/ ? "bundle" : "so"
+desc 'Print the current version (used for releases)'
+task version: :load_version do
+  puts Mongo::Auth::Kerberos::VERSION
 end
 
 RSpec::Core::RakeTask.new(:rspec)
 
-if jruby?
-  task :build => [ :clean_all, :compile ] do
-    system "gem build mongo_kerberos.gemspec"
+# `rake version` is used by the deployment system so get the release version
+# of the product beng deployed. It must do nothing more than just print the
+# product version number.
+desc 'Print the current version'
+task :build => [ :clean_all, *(jruby? ? :compile : nil) ] do
+  output = "--output=#{ENV['GEM_FILE_NAME']}" if ENV['GEM_FILE_NAME']
+  system "gem build #{output} mongo_kerberos.gemspec"
+end
+
+# `rake gem_file_name` is used by the deployment system so get the name of
+# the gem file to be generated. It must do nothing more than just print the
+# name of the gem file to generate.
+desc 'Print the name of the gem file to generate.'
+task gem_file_name: :load_version do
+  base = "mongo_kerberos-#{Mongo::Auth::Kerberos::VERSION}"
+  base << '-java' if jruby?
+  puts "#{base}.gem"
+end
+
+# overrides the default Bundler-provided `release` task, which also
+# builds the gems. Our release process assumes the gems have already
+# been built (and signed via GPG), so we just need `rake release` to
+# push the gems to rubygems.
+desc 'Push the generated gems to RubyGems'
+task :release do
+  # confirm: there ought to be two gems, one for MRI, and one for Java. These
+  # will have been previously generated by the 'Release' GitHub action.
+  gems = Dir['*.gem']
+  if gems.length != 2
+    abort "Expected two gem files to be ready to release; got #{gems.length}"
   end
-else
-  task :build => :clean_all do
-    system "gem build mongo_kerberos.gemspec"
+
+  if ENV['GITHUB_ACTION'].nil?
+    abort <<~WARNING
+      `rake release` must be invoked from the `Release` GitHub action,
+      and must not be invoked locally. This ensures the gem is properly signed
+      and distributed by the appropriate user.
+
+      Note that it is the `rubygems/release-gem@v1` step in the `Release`
+      action that invokes this task. Do not rename or remove this task, or the
+      release-gem step will fail. Reimplement this task with caution.
+
+      NO GEMS were pushed to RubyGems.
+    WARNING
+  end
+
+  gems.each do |gem|
+    system 'gem', 'push', gem
   end
 end
 
 task :clean_all => :clean do
   begin
     Dir.chdir(Pathname(__FILE__).dirname + "lib") do
-      `rm native.#{extension}`
-      `rm native.o`
-      `rm native.jar`
+      %w[ o bundle so jar ].each do |e|
+         Dir.glob(File.join("**", "*.#{e}")).each do |f|
+          `rm #{f}`
+        end
+      end
     end
   rescue Exception => e
     puts e.message
@@ -75,22 +123,16 @@ task :spec => :compile do
   Rake::Task["rspec"].invoke
 end
 
-# Run bundle exec rake release with mri and jruby. Ex:
-#
-# rvm use 2.1.0@mongo_kerberos
-# bundle exec rake release
-# rvm use jruby@mongo_kerberos
-# bundle exec rake release
-task :release => :build do
-  system "git tag -a #{Mongo::Auth::Kerberos::VERSION} -m 'Tagging release: #{Mongo::Auth::Kerberos::VERSION}'"
-  system "git push --tags"
-  if jruby?
-    system "gem push mongo_kerberos-#{Mongo::Auth::Kerberos::VERSION}-java.gem"
-    system "rm mongo_kerberos-#{Mongo::Auth::Kerberos::VERSION}-java.gem"
-  else
-    system "gem push mongo_kerberos-#{Mongo::Auth::Kerberos::VERSION}.gem"
-    system "rm mongo_kerberos-#{Mongo::Auth::Kerberos::VERSION}.gem"
+task :default => [ :clean_all, :spec ]
+
+desc "Generate all documentation"
+task :docs => 'docs:yard'
+
+namespace :docs do
+  desc "Generate yard documention"
+  task yard: :load_version do
+    out = File.join('yard-docs', Mongo::Auth::Kerberos::VERSION)
+    FileUtils.rm_rf(out)
+    system "yardoc -o #{out} --title mongo-ruby-kerberos-#{Mongo::Auth::Kerberos::VERSION}"
   end
 end
-
-task :default => [ :clean_all, :spec ]

data/lib/mongo/auth/kerberos/conversation.rb

@@ -113,7 +113,7 @@ module Mongo
 
         # Create the new conversation.
         #
-        # @example Create the new coversation.
+        # @example Create the new conversation.
         #   Conversation.new(user, 'test.example.com')
         #
         # @param [ Auth::User ] user The user to converse about.
@@ -127,25 +127,12 @@ module Mongo
 
         private
 
-        if BSON::Environment.jruby?
-
-          def start_token
-            BSON::Binary.new(authenticator.initialize_challenge)
-          end
-
-          def continue_token
-            payload = reply.documents[0][PAYLOAD]
-            BSON::Binary.new(authenticator.evaluate_challenge(payload.data))
-          end
-        else
-
-          def start_token
-            authenticator.initialize_challenge
-          end
+        def start_token
+          authenticator.initialize_challenge
+        end
 
-          def continue_token
-            authenticator.evaluate_challenge(reply.documents[0][PAYLOAD])
-          end
+        def continue_token
+          authenticator.evaluate_challenge(reply.documents[0][PAYLOAD])
         end
 
         def validate!(reply)

data/lib/mongo/auth/kerberos/jruby/authenticator.rb

@@ -13,8 +13,9 @@
 # limitations under the License.
 
 require 'java'
-require 'mongo/auth/kerberos/jsasl.jar'
+require 'jruby'
 require 'mongo/auth/kerberos/native.jar'
+require 'forwardable'
 
 module Mongo
   module Auth

data/lib/mongo/auth/kerberos/mri/authenticator.rb

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-require 'mongo/auth/kerberos/native'
+require 'mongo_kerberos_native'
 
 module Mongo
   module Auth

data/lib/mongo/auth/kerberos/version.rb

@@ -1,23 +1,11 @@
-# Copyright (C) 2015 MongoDB, Inc.
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
+# frozen_string_literal: true
 
 module Mongo
   module Auth
     class Kerberos
 
       # The gem version number.
-      VERSION = '2.0.0'.freeze
+      VERSION = '2.1.2'
     end
   end
 end

data/lib/mongo/auth/kerberos.rb

@@ -22,13 +22,24 @@ module Mongo
     #
     # @since 2.0.0
     class Kerberos
-      include Executable
 
-      # The authentication mechinism string.
+      # The authentication mechanism string.
       #
       # @since 2.0.0
       MECHANISM = 'GSSAPI'.freeze
 
+      # Instantiate a new authenticator.
+      #
+      # example Create the authenticator.
+      #   Mongo::Auth::Kerberos.new(user)
+      #
+      # @param [ Mongo::Auth::User ] user The user to authenticate.
+      #
+      # @since 2.0.1
+      def initialize(user)
+        @user = user
+      end
+
       # Log the user in on the given connection.
       #
       # @example Log the user in.
@@ -41,10 +52,12 @@ module Mongo
       #
       # @since 2.0.0
       def login(connection)
-        conversation = Conversation.new(user, connection.address.host)
+        conversation = Conversation.new(@user, connection.address.host)
         reply = connection.dispatch([ conversation.start ])
+        connection.update_cluster_time(Operation::Result.new(reply))
         until reply.documents[0][Conversation::DONE]
           reply = connection.dispatch([ conversation.finalize(reply) ])
+          connection.update_cluster_time(Operation::Result.new(reply))
         end
         reply
       end

data/spec/mongo/auth/kerberos/conversation_spec.rb

@@ -20,6 +20,17 @@ describe Mongo::Auth::Kerberos::Conversation do
       and_return(authenticator)
   end
 
+  context 'when the user has a realm', if: RUBY_PLATFORM == 'java' do
+
+    let(:user) do
+      Mongo::Auth::User.new(user: 'user1@MYREALM.ME')
+    end
+
+    it 'includes the realm in the username as it was provided' do
+      expect(conversation.user.name).to eq(user.name)
+    end
+  end
+
   describe '#start' do
 
     let(:query) do
@@ -46,13 +57,9 @@ describe Mongo::Auth::Kerberos::Conversation do
       expect(selector[:mechanism]).to eq('GSSAPI')
     end
 
-    it 'sets the payload', unless: BSON::Environment.jruby? do
+    it 'sets the payload' do
       expect(selector[:payload]).to start_with('test')
     end
-
-    it 'sets the payload', if: BSON::Environment.jruby? do
-      expect(selector[:payload].data).to start_with('test')
-    end
   end
 
   describe '#finalize' do
@@ -61,8 +68,10 @@ describe Mongo::Auth::Kerberos::Conversation do
       Mongo::Protocol::Reply.new
     end
 
+    let(:continue_token_contents) { 'testing' }
+
     let(:continue_token) do
-      BSON::Environment.jruby? ? BSON::Binary.new('testing') : 'testing'
+      continue_token_contents
     end
 
     context 'when the conversation is a success' do
@@ -71,7 +80,7 @@ describe Mongo::Auth::Kerberos::Conversation do
         [{
           'conversationId' => 1,
           'done' => false,
-          'payload' => continue_token,
+          'payload' => continue_token_contents,
           'ok' => 1.0
         }]
       end
@@ -86,7 +95,7 @@ describe Mongo::Auth::Kerberos::Conversation do
 
       before do
         expect(authenticator).to receive(:evaluate_challenge).
-          with('testing').and_return(continue_token)
+          with(continue_token_contents).and_return(continue_token_contents)
         reply.instance_variable_set(:@documents, documents)
       end
 
@@ -94,14 +103,10 @@ describe Mongo::Auth::Kerberos::Conversation do
         expect(selector[:conversationId]).to eq(1)
       end
 
-      it 'sets the payload', unless: BSON::Environment.jruby? do
+      it 'sets the payload' do
         expect(selector[:payload]).to eq(continue_token)
       end
 
-      it 'sets the payload', if: BSON::Environment.jruby? do
-        expect(selector[:payload].data).to eq(continue_token)
-      end
-
       it 'sets the continue flag' do
         expect(selector[:saslContinue]).to eq(1)
       end

data/spec/spec_helper.rb

@@ -15,15 +15,6 @@
 $LOAD_PATH.unshift(File.dirname(__FILE__))
 $LOAD_PATH.unshift(File.join(File.dirname(__FILE__), "..", "lib"))
 
-if ENV["CI"] && !ENV["WITH_EXT"]
-  require "simplecov"
-  require "coveralls"
-  SimpleCov.formatter = Coveralls::SimpleCov::Formatter
-  SimpleCov.start do
-    add_filter "spec"
-  end
-end
-
 require "mongo_kerberos"
 require "rspec"
 

metadata

@@ -1,55 +1,32 @@
 --- !ruby/object:Gem::Specification
 name: mongo_kerberos
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.1.2
 platform: java
 authors:
-- Emily Stolfo
-- Durran Jordan
+- The MongoDB Ruby Team
 autorequire:
 bindir: bin
-cert_chain:
-- |
-  -----BEGIN CERTIFICATE-----
-  MIIDfDCCAmSgAwIBAgIBATANBgkqhkiG9w0BAQUFADBCMRQwEgYDVQQDDAtkcml2
-  ZXItcnVieTEVMBMGCgmSJomT8ixkARkWBTEwZ2VuMRMwEQYKCZImiZPyLGQBGRYD
-  Y29tMB4XDTE0MTEyMDE1NTYxOVoXDTE1MTEyMDE1NTYxOVowQjEUMBIGA1UEAwwL
-  ZHJpdmVyLXJ1YnkxFTATBgoJkiaJk/IsZAEZFgUxMGdlbjETMBEGCgmSJomT8ixk
-  ARkWA2NvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFdSAa8fRm1
-  bAM9za6Z0fAH4g02bqM1NGnw8zJQrE/PFrFfY6IFCT2AsLfOwr1maVm7iU1+kdVI
-  IQ+iI/9+E+ArJ+rbGV3dDPQ+SLl3mLT+vXjfjcxMqI2IW6UuVtt2U3Rxd4QU0kdT
-  JxmcPYs5fDN6BgYc6XXgUjy3m+Kwha2pGctdciUOwEfOZ4RmNRlEZKCMLRHdFP8j
-  4WTnJSGfXDiuoXICJb5yOPOZPuaapPSNXp93QkUdsqdKC32I+KMpKKYGBQ6yisfA
-  5MyVPPCzLR1lP5qXVGJPnOqUAkvEUfCahg7EP9tI20qxiXrR6TSEraYhIFXL0EGY
-  u8KAcPHm5KkCAwEAAaN9MHswCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0O
-  BBYEFFt3WbF+9JpUjAoj62cQBgNb8HzXMCAGA1UdEQQZMBeBFWRyaXZlci1ydWJ5
-  QDEwZ2VuLmNvbTAgBgNVHRIEGTAXgRVkcml2ZXItcnVieUAxMGdlbi5jb20wDQYJ
-  KoZIhvcNAQEFBQADggEBAKjvumG2Fy9zAoSc1OEcmAqqOfzx1U+isGyEsz1rs5eT
-  HAIHsxaEdZTjSwDuqyelLDWJHWspeWU5pV5lepfI4cop29wwoPJIJ9Az2RMMbtdv
-  gFApVb6QX61OMenFeOdJ/QZ3n9xcrxJZFdvrXQ5GjEU2anq3dJhFeESwIMlfVJC7
-  7XrlMxizzH712DPfy65dMj0Y39qHdoWYKeCkEoj5UWNcHRK9xgaHJR6prlXrIhgb
-  o2UXDbWtz5PqoFd8EgNJAn3+BG1pwC9S9pVFG3WPucfAx/bE8iq/vvchHei5Y/Vo
-  aAz5f/hY4zFeYWvGDBHYEXE1rTN2hhMSyJscPcFbmz0=
-  -----END CERTIFICATE-----
-date: 2015-03-25 00:00:00.000000000 Z
+cert_chain: []
+date: 2024-11-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: mongo
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: 2.0.0
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.0.0
-  prerelease: false
+        version: '2.0'
+  name: mongo
   type: :runtime
-description: Adds Kerberos authentication via libsasl to the MongoDB Ruby Driver on MRI and JRuby
-email:
-- mongodb-dev@googlegroups.com
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+description: Adds Kerberos authentication via libsasl to the MongoDB Ruby Driver on
+  MRI and JRuby
+email: dbx-ruby@mongodb.com
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -59,43 +36,44 @@ files:
 - NOTICE
 - README.md
 - Rakefile
-- lib/mongo_kerberos.rb
 - lib/mongo/auth/kerberos.rb
 - lib/mongo/auth/kerberos/conversation.rb
-- lib/mongo/auth/kerberos/jsasl.jar
-- lib/mongo/auth/kerberos/native.bundle
-- lib/mongo/auth/kerberos/native.jar
-- lib/mongo/auth/kerberos/version.rb
 - lib/mongo/auth/kerberos/jruby/authenticator.rb
 - lib/mongo/auth/kerberos/mri/authenticator.rb
-- spec/spec_helper.rb
+- lib/mongo/auth/kerberos/native.jar
+- lib/mongo/auth/kerberos/version.rb
+- lib/mongo_kerberos.rb
 - spec/mongo/auth/kerberos/conversation_spec.rb
 - spec/mongo/auth/kerberos/mri/authenticator_spec.rb
-homepage: http://www.mongodb.org
+- spec/spec_helper.rb
+homepage: https://docs.mongodb.com/ruby-driver/current/tutorials/ruby-driver-authentication/#kerberos-gssapi-mechanism
 licenses:
-- Apache License Version 2.0
-metadata: {}
+- Apache-2.0
+metadata:
+  bug_tracker_uri: https://jira.mongodb.org/projects/RUBY
+  changelog_uri: https://github.com/mongodb/mongo-ruby-kerberos/releases
+  documentation_uri: https://www.mongodb.com/docs/ruby-driver/current/reference/authentication/#kerberos--gssapi-
+  source_code_uri: https://github.com/mongodb/mongo-ruby-kerberos
 post_install_message:
 rdoc_options: []
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: 1.9.3
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: 1.3.6
 requirements: []
-rubyforge_project: mongo_kerberos
-rubygems_version: 2.1.9
+rubygems_version: 3.3.26
 signing_key:
 specification_version: 4
 summary: Kerberos authentication support for the MongoDB Ruby driver
 test_files:
-- spec/spec_helper.rb
 - spec/mongo/auth/kerberos/conversation_spec.rb
 - spec/mongo/auth/kerberos/mri/authenticator_spec.rb
+- spec/spec_helper.rb