Examples of sun.security.krb5.internal.KDCOptions

sun.security.krb5.PrincipalName
etf.org/rfc/rfc4120.txt"> http://www.ietf.org/rfc/rfc4120.txt.
This class appears as data field in the initial request(KRB_AS_REQ) or subsequent request(KRB_TGS_REQ) to the KDC and indicates the flags that the client wants to set on the tickets. The optional bits are:
- KDCOptions.RESERVED
- KDCOptions.FORWARDABLE
- KDCOptions.FORWARDED
- KDCOptions.PROXIABLE
- KDCOptions.PROXY
- KDCOptions.ALLOW_POSTDATE
- KDCOptions.POSTDATED
- KDCOptions.RENEWABLE
- KDCOptions.RENEWABLE_OK
- KDCOptions.ENC_TKT_IN_SKEY
- KDCOptions.RENEW
- KDCOptions.VALIDATE
Various checks must be made before honoring an option. The restrictions on the use of some options are as follows:
1. FORWARDABLE, FORWARDED, PROXIABLE, RENEWABLE options may be set in subsequent request only if the ticket_granting ticket on which it is based has the same options (FORWARDABLE, FORWARDED, PROXIABLE, RENEWABLE) set.
2. ALLOW_POSTDATE may be set in subsequent request only if the ticket-granting ticket on which it is based also has its MAY_POSTDATE flag set.
3. POSTDATED may be set in subsequent request only if the ticket-granting ticket on which it is based also has its MAY_POSTDATE flag set.
4. RENEWABLE or RENEW may be set in subsequent request only if the ticket-granting ticket on which it is based also has its RENEWABLE flag set.
5. POXY may be set in subsequent request only if the ticket-granting ticket on which it is based also has its PROXIABLE flag set, and the address(es) of the host from which the resulting ticket is to be valid should be included in the addresses field of the request.
6. FORWARDED, PROXY, ENC_TKT_IN_SKEY, RENEW, VALIDATE are used only in subsequent requests.


        String[] components = serverPrincipal.getNameStrings();


        if (serverPrincipal.getNameType() != PrincipalName.KRB_NT_SRV_HST ||
            components.length < 2)
            throw new KrbException(Krb5.KRB_ERR_GENERIC, "Bad name");


        String host = components[1];
        InetAddress addr[] = InetAddress.getAllByName(host);
        HostAddress hAddrs[] = new HostAddress[addr.length];

View Full Code Here

    String serviceName = "host/" + remoteHost.getHost();
    if (LOG.isDebugEnabled())
      LOG.debug("Fetching service ticket for host at: " + serviceName);
    Credentials serviceCred = null;
    try {
      PrincipalName principal = new PrincipalName(serviceName,
          PrincipalName.KRB_NT_SRV_HST);
      serviceCred = Credentials.acquireServiceCreds(principal
          .toString(), Krb5Util.ticketToCreds(getTgtFromSubject()));
    } catch (Exception e) {
      throw new IOException("Can't get service ticket for: "
          + serviceName, e);
    }

View Full Code Here

    String serviceName = "host/" + remoteHost.getHost();
    if (LOG.isDebugEnabled())
      LOG.debug("Fetching service ticket for host at: " + serviceName);
    Credentials serviceCred = null;
    try {
      PrincipalName principal = new PrincipalName(serviceName,
          PrincipalName.KRB_NT_SRV_HST);
      serviceCred = Credentials.acquireServiceCreds(principal
          .toString(), Krb5Util.ticketToCreds(getTgtFromSubject()));
    } catch (Exception e) {
      throw new IOException("Can't get service ticket for: "
          + serviceName, e);
    }

View Full Code Here

    public KerberosKey[] getKeys(KerberosPrincipal principal) {
        try {
            if (princ != null && !principal.equals(princ)) {
                return new KerberosKey[0];
            }
            PrincipalName pn = new PrincipalName(principal.getName());
            EncryptionKey[] keys = takeSnapshot().readServiceKeys(pn);
            KerberosKey[] kks = new KerberosKey[keys.length];
            for (int i=0; i<kks.length; i++) {
                Integer tmp = keys[i].getKeyVersionNumber();
                kks[i] = new KerberosKey(

View Full Code Here

     * in either a Kerberos configuration file or via the
     * java.security.krb5.realm system property.
     */
    public KerberosPrincipal(String name) {


        PrincipalName krb5Principal = null;


        try {
            // Appends the default realm if it is missing
            krb5Principal = new PrincipalName(name, KRB_NT_PRINCIPAL);
        } catch (KrbException e) {
            throw new IllegalArgumentException(e.getMessage());
        }
        nameType = KRB_NT_PRINCIPAL;  // default name type
        fullName = krb5Principal.toString();
        realm = krb5Principal.getRealmString();
    }

View Full Code Here

     * file or via the java.security.krb5.realm system property.
     */


    public KerberosPrincipal(String name, int nameType) {


        PrincipalName krb5Principal = null;


        try {
            // Appends the default realm if it is missing
            krb5Principal  = new PrincipalName(name,nameType);
        } catch (KrbException e) {
            throw new IllegalArgumentException(e.getMessage());
        }


        this.nameType = nameType;
        fullName = krb5Principal.toString();
        realm = krb5Principal.getRealmString();
    }

View Full Code Here

     *          <a href=http://www.ietf.org/rfc/rfc4120.txt> RFC4120</a>.
     */
    private void writeObject(ObjectOutputStream oos)
            throws IOException {


        PrincipalName krb5Principal;
        try {
            krb5Principal  = new PrincipalName(fullName, nameType);
            oos.writeObject(krb5Principal.asn1Encode());
            oos.writeObject(krb5Principal.getRealm().asn1Encode());
        } catch (Exception e) {
            throw new IOException(e);
        }
    }

View Full Code Here

            throws IOException, ClassNotFoundException {
        byte[] asn1EncPrincipal = (byte [])ois.readObject();
        byte[] encRealm = (byte [])ois.readObject();
        try {
           Realm realmObject = new Realm(new DerValue(encRealm));
           PrincipalName krb5Principal = new PrincipalName(
                   new DerValue(asn1EncPrincipal), realmObject);
           realm = realmObject.toString();
           fullName = krb5Principal.toString();
           nameType = krb5Principal.getNameType();
        } catch (Exception e) {
            throw new IOException(e);
        }
    }

View Full Code Here

    public KeyImpl(KerberosPrincipal principal,
       char[] password,
       String algorithm) {


  try {
      PrincipalName princ = new PrincipalName(principal.getName());
      EncryptionKey key = 
    new EncryptionKey(password, princ.getSalt(), algorithm);
      this.keyBytes = key.getBytes();
      this.keyType = key.getEType();
  } catch (KrbException e) {
      throw new IllegalArgumentException(e.getMessage());
  }

View Full Code Here

     * in either a Kerberos configuration file or via the 
     * java.security.krb5.realm system property.
     */
    public KerberosPrincipal(String name) {


  PrincipalName krb5Principal = null;


  try {
      // Appends the default realm if it is missing
      krb5Principal = new PrincipalName(name, KRB_NT_PRINCIPAL);
  } catch (KrbException e) {
      throw new IllegalArgumentException(e.getMessage());
  }
  nameType = KRB_NT_PRINCIPAL;  // default name type
  fullName = krb5Principal.toString();
  realm = krb5Principal.getRealmString();
    }

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of sun.security.krb5.internal.KDCOptions

com.sun.security.auth.module.Krb5LoginModule

com.sun.xml.ws.security.impl.kerberos.KerberosLogin

org.apache.hadoop.security.SecurityUtil

org.apache.ws.security.kerberos.KrbTicketDecoder

PAData

ParseConfig

UnknownCCEntry

javax.security.auth.kerberos.KeyTab

javax.crypto.spec.PBEKeySpec

javax.crypto.spec.DESedeKeySpec

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.