org.apache.directory.server.kerberos.kdc.ticketgrant
Class TicketGrantingService

java.lang.Object
  org.apache.directory.server.kerberos.kdc.ticketgrant.TicketGrantingService

public class TicketGrantingService
extends Object

Author:

Apache Directory Project

Constructor Summary

TicketGrantingService()

Method Summary

static void	execute(TicketGrantingContext tgsContext)
static org.apache.directory.server.kerberos.shared.store.PrincipalStoreEntry	getEntry(KerberosPrincipal principal, org.apache.directory.server.kerberos.shared.store.PrincipalStore store, org.apache.directory.shared.kerberos.exceptions.ErrorType errorType) Get a PrincipalStoreEntry given a principal.
static void	getRequestPrincipalEntry(TicketGrantingContext tgsContext)
static org.apache.directory.shared.kerberos.messages.Authenticator	verifyAuthHeader(org.apache.directory.shared.kerberos.messages.ApReq authHeader, org.apache.directory.shared.kerberos.messages.Ticket ticket, org.apache.directory.shared.kerberos.components.EncryptionKey serverKey, long clockSkew, org.apache.directory.server.kerberos.shared.replay.ReplayCache replayCache, boolean emptyAddressesAllowed, InetAddress clientAddress, org.apache.directory.server.kerberos.shared.crypto.encryption.CipherTextHandler lockBox, org.apache.directory.server.kerberos.shared.crypto.encryption.KeyUsage authenticatorKeyUsage, boolean isValidate) Verifies an AuthHeader using guidelines from RFC 1510 section A.10., "KRB_AP_REQ verification."
static void	verifyTgt(TicketGrantingContext tgsContext)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TicketGrantingService

public TicketGrantingService()

Method Detail

execute

public static void execute(TicketGrantingContext tgsContext)
                    throws Exception

Throws:

Exception

verifyTgt

public static void verifyTgt(TicketGrantingContext tgsContext)
                      throws org.apache.directory.shared.kerberos.exceptions.KerberosException

Throws:

org.apache.directory.shared.kerberos.exceptions.KerberosException

getRequestPrincipalEntry

public static void getRequestPrincipalEntry(TicketGrantingContext tgsContext)
                                     throws org.apache.directory.shared.kerberos.exceptions.KerberosException

Throws:

org.apache.directory.shared.kerberos.exceptions.KerberosException

getEntry

public static org.apache.directory.server.kerberos.shared.store.PrincipalStoreEntry getEntry(KerberosPrincipal principal,
                                                                                             org.apache.directory.server.kerberos.shared.store.PrincipalStore store,
                                                                                             org.apache.directory.shared.kerberos.exceptions.ErrorType errorType)
                                                                                      throws org.apache.directory.shared.kerberos.exceptions.KerberosException

Get a PrincipalStoreEntry given a principal. The ErrorType is used to indicate whether any resulting error pertains to a server or client.

Parameters:

principal -

store -

errorType -

Returns:

The PrincipalStoreEntry

Throws:

Exception

org.apache.directory.shared.kerberos.exceptions.KerberosException

verifyAuthHeader

public static org.apache.directory.shared.kerberos.messages.Authenticator verifyAuthHeader(org.apache.directory.shared.kerberos.messages.ApReq authHeader,
                                                                                           org.apache.directory.shared.kerberos.messages.Ticket ticket,
                                                                                           org.apache.directory.shared.kerberos.components.EncryptionKey serverKey,
                                                                                           long clockSkew,
                                                                                           org.apache.directory.server.kerberos.shared.replay.ReplayCache replayCache,
                                                                                           boolean emptyAddressesAllowed,
                                                                                           InetAddress clientAddress,
                                                                                           org.apache.directory.server.kerberos.shared.crypto.encryption.CipherTextHandler lockBox,
                                                                                           org.apache.directory.server.kerberos.shared.crypto.encryption.KeyUsage authenticatorKeyUsage,
                                                                                           boolean isValidate)
                                                                                    throws org.apache.directory.shared.kerberos.exceptions.KerberosException

Verifies an AuthHeader using guidelines from RFC 1510 section A.10., "KRB_AP_REQ verification."

Parameters:

authHeader -

ticket -

serverKey -

clockSkew -

replayCache -

emptyAddressesAllowed -

clientAddress -

lockBox -

authenticatorKeyUsage -

isValidate -

Returns:

The authenticator.

Throws:

org.apache.directory.shared.kerberos.exceptions.KerberosException