org.apache.directory.server.kerberos.shared.store

Class TicketFactory

java.lang.Object

org.apache.directory.server.kerberos.shared.store.TicketFactory

public class TicketFactory
extends java.lang.Object

Field Summary

Fields

Modifier and Type	Field and Description
private CipherTextHandler	cipherTextHandler
private static int	ONE_DAY One day in milliseconds, used for default end time.
private static int	ONE_WEEK One week in milliseconds, used for default renewal period.

Constructor Summary

Constructors

Constructor and Description
TicketFactory()

Method Summary

Modifier and Type	Method and Description
EncryptionKey	getServerKey(javax.security.auth.kerberos.KerberosPrincipal serverPrincipal, java.lang.String serverPassword) Returns a server key derived from a server principal and server password.
Ticket	getTicket(javax.security.auth.kerberos.KerberosPrincipal clientPrincipal, javax.security.auth.kerberos.KerberosPrincipal serverPrincipal, EncryptionKey serverKey) Build the service ticket.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ONE_DAY

private static final int ONE_DAY

One day in milliseconds, used for default end time.

See Also:

Constant Field Values

ONE_WEEK

private static final int ONE_WEEK

One week in milliseconds, used for default renewal period.

See Also:

Constant Field Values

cipherTextHandler

private CipherTextHandler cipherTextHandler

Constructor Detail

TicketFactory

public TicketFactory()

Method Detail

getServerKey

public EncryptionKey getServerKey(javax.security.auth.kerberos.KerberosPrincipal serverPrincipal,
                                  java.lang.String serverPassword)

Returns a server key derived from a server principal and server password.

Parameters:

serverPrincipal -

serverPassword -

Returns:

The server's EncryptionKey.

getTicket

public Ticket getTicket(javax.security.auth.kerberos.KerberosPrincipal clientPrincipal,
                        javax.security.auth.kerberos.KerberosPrincipal serverPrincipal,
                        EncryptionKey serverKey)
                 throws KerberosException,
                        java.text.ParseException

Build the service ticket. The service ticket contains the session key generated by the KDC for the client and service to use. The service will unlock the authenticator with the session key from the ticket. The principal in the ticket must equal the authenticator client principal. If set in the AP Options, the Ticket can also be sealed with the session key.

Parameters:

clientPrincipal -

serverPrincipal -

serverKey -

Returns:

The Ticket.

Throws:

KerberosException

java.text.ParseException