org.apache.directory.server.kerberos.kdc.ticketgrant

Class TicketGrantingService

java.lang.Object

org.apache.directory.server.kerberos.kdc.ticketgrant.TicketGrantingService

public final class TicketGrantingService
extends java.lang.Object

Field Summary

Fields

Modifier and Type	Field and Description
private static ChecksumHandler	CHRECKSUM_HANDLER
private static CipherTextHandler	CIPHER_TEXT_HANDLER
private static org.slf4j.Logger	LOG_KRB the log for this class
private static java.lang.String	SERVICE_NAME

Constructor Summary

Constructors

Modifier	Constructor and Description
private	TicketGrantingService()

Method Summary

Modifier and Type	Method and Description
private static void	buildReply(TicketGrantingContext tgsContext)
private static void	configureTicketGranting(TicketGrantingContext tgsContext)
private static void	echoTicket(EncTicketPart newTicketPart, Ticket tgt)
static void	execute(TicketGrantingContext tgsContext)
private static void	generateTicket(TicketGrantingContext tgsContext)
private static void	getAuthHeader(TicketGrantingContext tgsContext)
static PrincipalStoreEntry	getEntry(javax.security.auth.kerberos.KerberosPrincipal principal, PrincipalStore store, ErrorType errorType) Get a PrincipalStoreEntry given a principal.
static void	getRequestPrincipalEntry(TicketGrantingContext tgsContext)
private static void	getTicketPrincipalEntry(TicketGrantingContext tgsContext)
private static void	monitorContext(TicketGrantingContext tgsContext)
private static void	monitorReply(TgsRep success, EncKdcRepPart part)
private static void	monitorRequest(KdcContext kdcContext)
private static void	processFlags(KerberosConfig config, KdcReq request, Ticket tgt, EncTicketPart newTicketPart)
private static void	processTimes(KerberosConfig config, KdcReq request, EncTicketPart newTicketPart, Ticket tgt)
private static void	processTransited(EncTicketPart newTicketPart, Ticket tgt)
private static void	selectEncryptionType(TicketGrantingContext tgsContext)
private static void	verifyBodyChecksum(TicketGrantingContext tgsContext) RFC4120 Section 3.3.2.
static void	verifyTgt(TicketGrantingContext tgsContext)
private static void	verifyTgtAuthHeader(TicketGrantingContext tgsContext)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG_KRB

private static final org.slf4j.Logger LOG_KRB

the log for this class

CIPHER_TEXT_HANDLER

private static final CipherTextHandler CIPHER_TEXT_HANDLER

SERVICE_NAME

private static final java.lang.String SERVICE_NAME

See Also:

Constant Field Values

CHRECKSUM_HANDLER

private static final ChecksumHandler CHRECKSUM_HANDLER

Constructor Detail

TicketGrantingService

private TicketGrantingService()

Method Detail

execute

public static void execute(TicketGrantingContext tgsContext)
                    throws java.lang.Exception

Throws:

java.lang.Exception

configureTicketGranting

private static void configureTicketGranting(TicketGrantingContext tgsContext)
                                     throws KerberosException

Throws:

KerberosException

monitorRequest

private static void monitorRequest(KdcContext kdcContext)
                            throws java.lang.Exception

Throws:

java.lang.Exception

selectEncryptionType

private static void selectEncryptionType(TicketGrantingContext tgsContext)
                                  throws java.lang.Exception

Throws:

java.lang.Exception

getAuthHeader

private static void getAuthHeader(TicketGrantingContext tgsContext)
                           throws java.lang.Exception

Throws:

java.lang.Exception

verifyTgt

public static void verifyTgt(TicketGrantingContext tgsContext)
                      throws KerberosException

Throws:

KerberosException

getTicketPrincipalEntry

private static void getTicketPrincipalEntry(TicketGrantingContext tgsContext)
                                     throws KerberosException

Throws:

KerberosException

verifyTgtAuthHeader

private static void verifyTgtAuthHeader(TicketGrantingContext tgsContext)
                                 throws KerberosException

Throws:

KerberosException

verifyBodyChecksum

private static void verifyBodyChecksum(TicketGrantingContext tgsContext)
                                throws KerberosException

RFC4120

Section 3.3.2. Receipt of KRB_TGS_REQ Message -> 2nd paragraph Section 5.5.1. KRB_AP_REQ Definition -> Authenticator -> cksum

Throws:

KerberosException

getRequestPrincipalEntry

public static void getRequestPrincipalEntry(TicketGrantingContext tgsContext)
                                     throws KerberosException

Throws:

KerberosException

generateTicket

private static void generateTicket(TicketGrantingContext tgsContext)
                            throws KerberosException,
                                   InvalidTicketException

Throws:

KerberosException

InvalidTicketException

buildReply

private static void buildReply(TicketGrantingContext tgsContext)
                        throws KerberosException

Throws:

KerberosException

monitorContext

private static void monitorContext(TicketGrantingContext tgsContext)

monitorReply

private static void monitorReply(TgsRep success,
                                 EncKdcRepPart part)

processFlags

private static void processFlags(KerberosConfig config,
                                 KdcReq request,
                                 Ticket tgt,
                                 EncTicketPart newTicketPart)
                          throws KerberosException

Throws:

KerberosException

processTimes

private static void processTimes(KerberosConfig config,
                                 KdcReq request,
                                 EncTicketPart newTicketPart,
                                 Ticket tgt)
                          throws KerberosException

Throws:

KerberosException

processTransited

private static void processTransited(EncTicketPart newTicketPart,
                                     Ticket tgt)

echoTicket

private static void echoTicket(EncTicketPart newTicketPart,
                               Ticket tgt)

getEntry

public static PrincipalStoreEntry getEntry(javax.security.auth.kerberos.KerberosPrincipal principal,
                                           PrincipalStore store,
                                           ErrorType errorType)
                                    throws KerberosException

Get a PrincipalStoreEntry given a principal. The ErrorType is used to indicate whether any resulting error pertains to a server or client.

Parameters:

principal -

store -

errorType -

Returns:

The PrincipalStoreEntry

Throws:

java.lang.Exception

KerberosException