Examples of org.apache.directory.shared.kerberos.messages.TgsRep

Package org.apache.directory.shared.kerberos.messages

Examples of org.apache.directory.shared.kerberos.messages.TgsRep

org.apache.directory.shared.kerberos.messages.TgsRep
TGS-REP message. It's just a KDC-REP message with a message type set to 13. It will store the object described by the ASN.1 grammar :
```
 TGS-REP         ::= [APPLICATION 13]  
```
@author Apache Directory Project


        handler.messageReceived( session, message );


        Object msg = session.getMessage();
        assertEquals( "session.getMessage() instanceOf", TgsRep.class, msg.getClass() );
        TgsRep reply = ( TgsRep ) msg;


        assertEquals( "Encryption type", EncryptionType.DES_CBC_MD5, reply.getEncPart().getEType() );
    }

View Full Code Here


        handler.messageReceived( session, message );


        Object msg = session.getMessage();
        assertEquals( "session.getMessage() instanceOf", TgsRep.class, msg.getClass() );
        TgsRep reply = ( TgsRep ) msg;


        assertEquals( "Encryption type", EncryptionType.AES128_CTS_HMAC_SHA1_96, reply.getEncPart().getEType() );
        assertEquals( "Encryption type", EncryptionType.AES128_CTS_HMAC_SHA1_96, reply.getTicket().getEncPart()
                .getEType() );
    }

View Full Code Here


        handler.messageReceived( session, message );


        Object msg = session.getMessage();
        assertEquals( "session.getMessage() instanceOf", TgsRep.class, msg.getClass() );
        TgsRep reply = ( TgsRep ) msg;


        assertEquals( "Encryption type", EncryptionType.AES128_CTS_HMAC_SHA1_96, reply.getEncPart().getEType() );
        assertEquals( "Encryption type", EncryptionType.AES128_CTS_HMAC_SHA1_96, reply.getTicket().getEncPart()
            .getEType() );
    }

View Full Code Here


        handler.messageReceived( session, message );


        Object msg = session.getMessage();
        assertEquals( "session.getMessage() instanceOf", TgsRep.class, msg.getClass() );
        TgsRep reply = ( TgsRep ) msg;


        assertEquals( "Encryption type", EncryptionType.AES128_CTS_HMAC_SHA1_96, reply.getEncPart().getEType() );
        assertEquals( "Encryption type", EncryptionType.AES128_CTS_HMAC_SHA1_96, reply.getTicket().getEncPart()
            .getEType() );


        assertEquals( "Nonce", nonce, reply.getNonce() );
    }

View Full Code Here


        handler.messageReceived( session, message );


        Object msg = session.getMessage();
        assertEquals( "session.getMessage() instanceOf", TgsRep.class, msg.getClass() );
        TgsRep reply = ( TgsRep ) msg;


        assertEquals( "Encryption type", EncryptionType.AES128_CTS_HMAC_SHA1_96, reply.getEncPart().getEType() );
        assertEquals( "Encryption type", EncryptionType.AES128_CTS_HMAC_SHA1_96, reply.getTicket().getEncPart()
            .getEType() );
    }

View Full Code Here


        handler.messageReceived( session, message );


        Object msg = session.getMessage();
        assertEquals( "session.getMessage() instanceOf", TgsRep.class, msg.getClass() );
        TgsRep reply = ( TgsRep ) msg;


        assertEquals( "Encryption type", EncryptionType.DES_CBC_MD5, reply.getEncPart().getEType() );
        assertEquals( "Encryption type", EncryptionType.AES128_CTS_HMAC_SHA1_96, reply.getTicket().getEncPart()
            .getEType() );
    }

View Full Code Here

        catch ( DecoderException de )
        {
            fail( de.getMessage() );
        }


        TgsRep tgsRep = tgsRepContainer.getTgsRep();


        // Check the encoding
        int length = tgsRep.computeLength();


        // Check the length
        assertEquals( 0xAC, length );


        // Check the encoding
        ByteBuffer encodedPdu = ByteBuffer.allocate( length );


        try
        {
            encodedPdu = tgsRep.encode( encodedPdu );


            // Check the length
            assertEquals( 0xAC, encodedPdu.limit() );
        }
        catch ( EncoderException ee )

View Full Code Here

        Asn1Decoder kdcRepDecoder = new Asn1Decoder();


        KdcRepContainer kdcRepContainer = new KdcRepContainer( tgsRepContainer.getStream() );


        // Store the created TGS-REP object into the KDC-REP container
        TgsRep tgsRep = new TgsRep();
        kdcRepContainer.setKdcRep( tgsRep );


        // Decode the KDC_REP PDU
        try
        {
            kdcRepDecoder.decode( tgsRepContainer.getStream(), kdcRepContainer );
        }
        catch ( DecoderException de )
        {
            throw de;
        }


        // Update the expected length for the current TLV
        tlv.setExpectedLength( tlv.getExpectedLength() - tlv.getLength() );


        // Update the parent
        tgsRepContainer.updateParent();


        if ( tgsRep.getMessageType() != KerberosMessageType.TGS_REP )
        {
            throw new DecoderException( "Bad message type" );
        }


        tgsRepContainer.setTgsRep( tgsRep );

View Full Code Here

                // We have an error
                LOG.debug( "TGT request failed : {}", kdcRep );
                throw new KerberosException( ( KrbError ) kdcRep );
            }


            TgsRep rep = ( TgsRep ) kdcRep;
            byte[] decryptedData = cipherTextHandler.decrypt( sessionKey, rep.getEncPart(), KeyUsage.TGS_REP_ENC_PART_TGS_SESS_KEY );
            EncTgsRepPart encTgsRepPart = KerberosDecoder.decodeEncTgsRepPart( decryptedData );
            
            if ( currentNonce != encTgsRepPart.getEncKdcRepPart().getNonce() )
            {
                throw new KerberosException( ErrorType.KRB_ERR_GENERIC, "received nonce didn't match with the nonce sent in the request" );
            }
            
            
            // Everything is fine, return the response
            LOG.debug( "TGT request successful : {}", rep );


            ServiceTicket srvTkt = new ServiceTicket( rep.getTicket(), encTgsRepPart.getEncKdcRepPart() );
            
            return srvTkt;
        }
        catch( KerberosException e )
        {

View Full Code Here

    {
        KdcReq request = tgsContext.getRequest();
        Ticket tgt = tgsContext.getTgt();
        Ticket newTicket = tgsContext.getNewTicket();


        TgsRep reply = new TgsRep();


        reply.setCName( tgt.getEncTicketPart().getCName() );
        reply.setCRealm( tgt.getEncTicketPart().getCRealm() );
        reply.setTicket( newTicket );


        EncKdcRepPart encKdcRepPart = new EncKdcRepPart();


        encKdcRepPart.setKey( newTicket.getEncTicketPart().getKey() );
        encKdcRepPart.setNonce( request.getKdcReqBody().getNonce() );
        // TODO - resp.last-req := fetch_last_request_info(client); requires store
        // FIXME temporary fix, IMO we should create some new ATs to store this info in DIT
        LastReq lastReq = new LastReq();
        lastReq.addEntry( new LastReqEntry( LastReqType.TIME_OF_INITIAL_REQ, new KerberosTime() ) );
        encKdcRepPart.setLastReq( lastReq );


        encKdcRepPart.setFlags( newTicket.getEncTicketPart().getFlags() );
        encKdcRepPart.setClientAddresses( newTicket.getEncTicketPart().getClientAddresses() );
        encKdcRepPart.setAuthTime( newTicket.getEncTicketPart().getAuthTime() );
        encKdcRepPart.setStartTime( newTicket.getEncTicketPart().getStartTime() );
        encKdcRepPart.setEndTime( newTicket.getEncTicketPart().getEndTime() );
        encKdcRepPart.setSName( newTicket.getSName() );
        encKdcRepPart.setSRealm( newTicket.getRealm() );


        if ( newTicket.getEncTicketPart().getFlags().isRenewable() )
        {
            encKdcRepPart.setRenewTill( newTicket.getEncTicketPart().getRenewTill() );
        }


        if ( LOG_KRB.isDebugEnabled() )
        {
            monitorContext( tgsContext );
            monitorReply( reply, encKdcRepPart );
        }


        EncTgsRepPart encTgsRepPart = new EncTgsRepPart();
        encTgsRepPart.setEncKdcRepPart( encKdcRepPart );


        Authenticator authenticator = tgsContext.getAuthenticator();


        EncryptedData encryptedData;


        if ( authenticator.getSubKey() != null )
        {
            encryptedData = cipherTextHandler.seal( authenticator.getSubKey(), encTgsRepPart,
                KeyUsage.TGS_REP_ENC_PART_TGS_AUTHNT_SUB_KEY );
        }
        else
        {
            encryptedData = cipherTextHandler.seal( tgt.getEncTicketPart().getKey(), encTgsRepPart,
                KeyUsage.TGS_REP_ENC_PART_TGS_SESS_KEY );
        }


        reply.setEncPart( encryptedData );
        reply.setEncKdcRepPart( encKdcRepPart );


        tgsContext.setReply( reply );
    }

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.apache.directory.shared.kerberos.messages.TgsRep

org.apache.directory.kerberos.client.KdcConnection

org.apache.directory.server.kerberos.kdc.ticketgrant.TicketGrantingService

org.apache.directory.server.kerberos.protocol.AuthenticationServiceTest

org.apache.directory.server.kerberos.protocol.TicketGrantingEncryptionTypeTest

org.apache.directory.server.kerberos.protocol.TicketGrantingServiceTest

org.apache.directory.shared.kerberos.codec.tgsRep.actions.StoreKdcRep

org.apache.directory.shared.kerberos.codec.TgsRepDecoderTest

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.