Kerberos authentication against FreeIPA - FAST Tunnel support

[Peter Schober]

* Prashant Bapat <prashant at apigee.com> [2016-03-02 15:38]:
> > I doubt you can, short of writing your own code to invoke native
> > code to get around the above issue.
> 
> Are there any pointers? Is there an example code?

I'd first check whether FreeIPA can be used with clients that don't
support that specific feature/transport.
Doesn't FreeIPA also offer an LDAP service, if so can you use that for
authentication?
Failing that maybe look into setting up a proxy/forwarder on the
machine hosting the IDP, and point your IDP to that. (No idea whether
that would work, but seems easier than extending the IDP with native
code.)
-peter