public class KerberosConfig
extends java.lang.Object
| Modifier and Type | Field and Description |
|---|---|
private long |
allowableClockSkew
The allowable clock skew.
|
static long |
DEFAULT_ALLOWABLE_CLOCKSKEW
The default allowable clockskew
|
static boolean |
DEFAULT_EMPTY_ADDRESSES_ALLOWED
The default for allowing empty addresses
|
static java.lang.String[] |
DEFAULT_ENCRYPTION_TYPES
The default encryption types
|
static boolean |
DEFAULT_PA_ENC_TIMESTAMP_REQUIRED
The default for requiring encrypted timestamps
|
static java.lang.String |
DEFAULT_PRINCIPAL
The default kdc service principal
|
static java.lang.String |
DEFAULT_REALM
The default kdc realm
|
static boolean |
DEFAULT_TGS_FORWARDABLE_ALLOWED
The default for allowing forwardable tickets
|
static int |
DEFAULT_TGS_MAXIMUM_RENEWABLE_LIFETIME
The default for the maximum renewable lifetime
|
static int |
DEFAULT_TGS_MAXIMUM_TICKET_LIFETIME
The default for the maximum ticket lifetime
|
static int |
DEFAULT_TGS_MINIMUM_TICKET_LIFETIME
The default for the minimum ticket lifetime, 4 minutes
|
static boolean |
DEFAULT_TGS_POSTDATED_ALLOWED
The default for allowing postdated tickets
|
static boolean |
DEFAULT_TGS_PROXIABLE_ALLOWED
The default for allowing proxiable tickets
|
static boolean |
DEFAULT_TGS_RENEWABLE_ALLOWED
The default for allowing renewable tickets
|
static boolean |
DEFAULT_VERIFY_BODY_CHECKSUM
The default for verifying the body checksum
|
private java.util.Set<EncryptionType> |
encryptionTypes
The encryption types.
|
private boolean |
isBodyChecksumVerified
Whether to verify the body checksum.
|
private boolean |
isEmptyAddressesAllowed
Whether empty addresses are allowed.
|
private boolean |
isForwardableAllowed
Whether forwardable addresses are allowed.
|
private boolean |
isPaEncTimestampRequired
Whether pre-authentication by encrypted timestamp is required.
|
private boolean |
isPostdatedAllowed
Whether postdated tickets are allowed.
|
private boolean |
isProxiableAllowed
Whether proxiable addresses are allowed.
|
private boolean |
isRenewableAllowed
Whether renewable tickets are allowed.
|
private long |
maximumRenewableLifetime
The maximum renewable lifetime.
|
private long |
maximumTicketLifetime
The maximum ticket lifetime.
|
private long |
minimumTicketLifetime
The minimum ticket lifetime.
|
private java.lang.String |
primaryRealm
The primary realm
|
private java.lang.String |
searchBaseDn |
private java.lang.String |
servicePrincipal
The service principal name.
|
private javax.security.auth.kerberos.KerberosPrincipal |
srvPrincipal |
| Constructor and Description |
|---|
KerberosConfig() |
| Modifier and Type | Method and Description |
|---|---|
long |
getAllowableClockSkew()
Returns the allowable clock skew.
|
java.util.Set<EncryptionType> |
getEncryptionTypes()
Returns the encryption types.
|
long |
getMaximumRenewableLifetime() |
long |
getMaximumTicketLifetime() |
long |
getMinimumTicketLifetime() |
java.lang.String |
getPrimaryRealm()
Returns the primary realm.
|
java.lang.String |
getSearchBaseDn() |
javax.security.auth.kerberos.KerberosPrincipal |
getServicePrincipal()
Returns the service principal for this KDC/changepwd service.
|
boolean |
isBodyChecksumVerified() |
boolean |
isEmptyAddressesAllowed() |
boolean |
isForwardableAllowed() |
boolean |
isPaEncTimestampRequired()
Returns whether pre-authentication by encrypted timestamp is required.
|
boolean |
isPostdatedAllowed() |
boolean |
isProxiableAllowed() |
boolean |
isRenewableAllowed() |
private void |
prepareEncryptionTypes()
Construct an HashSet containing the default encryption types
|
void |
setAllowableClockSkew(long allowableClockSkew) |
void |
setBodyChecksumVerified(boolean isBodyChecksumVerified) |
void |
setEmptyAddressesAllowed(boolean isEmptyAddressesAllowed) |
void |
setEncryptionTypes(EncryptionType[] encryptionTypes)
Initialize the encryptionTypes set
|
void |
setEncryptionTypes(java.util.Set<EncryptionType> encryptionTypes)
Initialize the encryptionTypes set
|
void |
setForwardableAllowed(boolean isForwardableAllowed) |
void |
setMaximumRenewableLifetime(long maximumRenewableLifetime) |
void |
setMaximumTicketLifetime(long maximumTicketLifetime) |
void |
setMinimumTicketLifetime(long minimumTicketLifetime) |
void |
setPaEncTimestampRequired(boolean isPaEncTimestampRequired) |
void |
setPostdatedAllowed(boolean isPostdatedAllowed) |
void |
setPrimaryRealm(java.lang.String primaryRealm) |
void |
setProxiableAllowed(boolean isProxiableAllowed) |
void |
setRenewableAllowed(boolean isRenewableAllowed) |
void |
setSearchBaseDn(java.lang.String searchBaseDn) |
void |
setServicePrincipal(java.lang.String kdcPrincipal) |
public static final java.lang.String DEFAULT_PRINCIPAL
public static final java.lang.String DEFAULT_REALM
public static final long DEFAULT_ALLOWABLE_CLOCKSKEW
public static final boolean DEFAULT_EMPTY_ADDRESSES_ALLOWED
public static final boolean DEFAULT_PA_ENC_TIMESTAMP_REQUIRED
public static final int DEFAULT_TGS_MAXIMUM_TICKET_LIFETIME
public static final int DEFAULT_TGS_MINIMUM_TICKET_LIFETIME
public static final int DEFAULT_TGS_MAXIMUM_RENEWABLE_LIFETIME
public static final boolean DEFAULT_TGS_FORWARDABLE_ALLOWED
public static final boolean DEFAULT_TGS_PROXIABLE_ALLOWED
public static final boolean DEFAULT_TGS_POSTDATED_ALLOWED
public static final boolean DEFAULT_TGS_RENEWABLE_ALLOWED
public static final boolean DEFAULT_VERIFY_BODY_CHECKSUM
public static final java.lang.String[] DEFAULT_ENCRYPTION_TYPES
private java.lang.String primaryRealm
private java.lang.String servicePrincipal
private long allowableClockSkew
private boolean isPaEncTimestampRequired
private long maximumTicketLifetime
private long minimumTicketLifetime
private long maximumRenewableLifetime
private boolean isEmptyAddressesAllowed
private boolean isForwardableAllowed
private boolean isProxiableAllowed
private boolean isPostdatedAllowed
private boolean isRenewableAllowed
private boolean isBodyChecksumVerified
private java.util.Set<EncryptionType> encryptionTypes
private javax.security.auth.kerberos.KerberosPrincipal srvPrincipal
private java.lang.String searchBaseDn
public long getAllowableClockSkew()
public boolean isEmptyAddressesAllowed()
public boolean isForwardableAllowed()
public boolean isPostdatedAllowed()
public boolean isProxiableAllowed()
public boolean isRenewableAllowed()
public long getMaximumRenewableLifetime()
public long getMaximumTicketLifetime()
public void setAllowableClockSkew(long allowableClockSkew)
allowableClockSkew - the allowableClockSkew to setpublic void setEncryptionTypes(EncryptionType[] encryptionTypes)
encryptionTypes - the encryptionTypes to setpublic void setEncryptionTypes(java.util.Set<EncryptionType> encryptionTypes)
encryptionTypes - the encryptionTypes to setpublic void setEmptyAddressesAllowed(boolean isEmptyAddressesAllowed)
isEmptyAddressesAllowed - the isEmptyAddressesAllowed to setpublic void setForwardableAllowed(boolean isForwardableAllowed)
isForwardableAllowed - the isForwardableAllowed to setpublic void setPaEncTimestampRequired(boolean isPaEncTimestampRequired)
isPaEncTimestampRequired - the isPaEncTimestampRequired to setpublic void setPostdatedAllowed(boolean isPostdatedAllowed)
isPostdatedAllowed - the isPostdatedAllowed to setpublic void setProxiableAllowed(boolean isProxiableAllowed)
isProxiableAllowed - the isProxiableAllowed to setpublic void setRenewableAllowed(boolean isRenewableAllowed)
isRenewableAllowed - the isRenewableAllowed to setpublic void setServicePrincipal(java.lang.String kdcPrincipal)
kdcPrincipal - the kdcPrincipal to setpublic void setMaximumRenewableLifetime(long maximumRenewableLifetime)
maximumRenewableLifetime - the maximumRenewableLifetime to setpublic void setMaximumTicketLifetime(long maximumTicketLifetime)
maximumTicketLifetime - the maximumTicketLifetime to setpublic void setPrimaryRealm(java.lang.String primaryRealm)
primaryRealm - the primaryRealm to setpublic java.lang.String getPrimaryRealm()
public javax.security.auth.kerberos.KerberosPrincipal getServicePrincipal()
public java.util.Set<EncryptionType> getEncryptionTypes()
public boolean isPaEncTimestampRequired()
public boolean isBodyChecksumVerified()
public void setBodyChecksumVerified(boolean isBodyChecksumVerified)
isBodyChecksumVerified - the isBodyChecksumVerified to setpublic java.lang.String getSearchBaseDn()
public void setSearchBaseDn(java.lang.String searchBaseDn)
public long getMinimumTicketLifetime()
public void setMinimumTicketLifetime(long minimumTicketLifetime)
private void prepareEncryptionTypes()