org.apache.directory.server.kerberos.shared.replay

Class ReplayCacheImpl

java.lang.Object

org.apache.directory.server.kerberos.shared.replay.ReplayCacheImpl

All Implemented Interfaces:

ReplayCache

public class ReplayCacheImpl
extends java.lang.Object
implements ReplayCache

"The replay cache will store at least the server name, along with the client name, time, and microsecond fields from the recently-seen authenticators, and if a matching tuple is found, the KRB_AP_ERR_REPEAT error is returned." We will store the entries in Ehacache instance

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
private class	ReplayCacheImpl.ClockskewExpirationPolicy an expiration policy based on the clockskew
static class	ReplayCacheImpl.ReplayCacheEntry A structure to hold an entry

Field Summary

Fields

Modifier and Type	Field and Description
private net.sf.ehcache.Cache	cache ehcache based storage to store the entries
private long	clockSkew The clock skew
private static long	DEFAULT_CLOCK_SKEW default clock skew
private static org.slf4j.Logger	LOG

Constructor Summary

Constructors

Constructor and Description
ReplayCacheImpl(net.sf.ehcache.Cache cache) Creates a new instance of InMemoryReplayCache.
ReplayCacheImpl(net.sf.ehcache.Cache cache, long clockSkew) Creates a new instance of InMemoryReplayCache.

Method Summary

Modifier and Type	Method and Description
void	clear() removes all the elements present in the cache
boolean	isReplay(javax.security.auth.kerberos.KerberosPrincipal serverPrincipal, javax.security.auth.kerberos.KerberosPrincipal clientPrincipal, KerberosTime clientTime, int clientMicroSeconds) Check if an entry is a replay or not.
void	save(javax.security.auth.kerberos.KerberosPrincipal serverPrincipal, javax.security.auth.kerberos.KerberosPrincipal clientPrincipal, KerberosTime clientTime, int clientMicroSeconds) Add a new entry into the cache.
void	setClockSkew(long clockSkew) Sets the clock skew.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

private static final org.slf4j.Logger LOG

cache

private net.sf.ehcache.Cache cache

ehcache based storage to store the entries

DEFAULT_CLOCK_SKEW

private static final long DEFAULT_CLOCK_SKEW

default clock skew

See Also:

Constant Field Values

clockSkew

private long clockSkew

The clock skew

Constructor Detail

ReplayCacheImpl

public ReplayCacheImpl(net.sf.ehcache.Cache cache)

Creates a new instance of InMemoryReplayCache. Sets the delay between each cleaning run to 5 seconds.

ReplayCacheImpl

public ReplayCacheImpl(net.sf.ehcache.Cache cache,
                       long clockSkew)

Creates a new instance of InMemoryReplayCache. Sets the delay between each cleaning run to 5 seconds. Sets the clockSkew to the given value

Parameters:

clockSkew - the allowed skew (milliseconds)

Method Detail

setClockSkew

public void setClockSkew(long clockSkew)

Sets the clock skew.

Parameters:

clockSkew -

isReplay

public boolean isReplay(javax.security.auth.kerberos.KerberosPrincipal serverPrincipal,
                        javax.security.auth.kerberos.KerberosPrincipal clientPrincipal,
                        KerberosTime clientTime,
                        int clientMicroSeconds)

Check if an entry is a replay or not.

Specified by:

isReplay in interface ReplayCache

Parameters:

serverPrincipal - The server principal

clientPrincipal - The client principal

clientTime - The client time

clientMicroSeconds - The client microsecond

Returns:

true if the request is a replay.

save

public void save(javax.security.auth.kerberos.KerberosPrincipal serverPrincipal,
                 javax.security.auth.kerberos.KerberosPrincipal clientPrincipal,
                 KerberosTime clientTime,
                 int clientMicroSeconds)

Add a new entry into the cache. A thread will clean all the timed out entries.

Specified by:

save in interface ReplayCache

Parameters:

serverPrincipal - The server principal

clientPrincipal - The client principal

clientTime - The client time

clientMicroSeconds - The client microsecond

clear

public void clear()

removes all the elements present in the cache

Specified by:

clear in interface ReplayCache