| Package | Description |
|---|---|
| org.apache.directory.kerberos.client | |
| org.apache.directory.server.kerberos.changepwd.exceptions |
Provides the root of the exception hierarchy, as well as the
enumerator for mapping Change Password errors to error codes.
|
| org.apache.directory.server.kerberos.changepwd.protocol |
Provides the
IoHandler and associated
ProtocolCodecFactory required
to implement the Change Password Service with the MINA NIO framework. |
| org.apache.directory.server.kerberos.changepwd.service |
Provides the Change Password Service.
|
| org.apache.directory.server.kerberos.kdc.authentication |
Provides the KDC's Authentication Service (AS).
|
| org.apache.directory.server.kerberos.kdc.ticketgrant |
Provides the KDC's Ticket-Granting Service (TGS).
|
| org.apache.directory.server.kerberos.protocol |
Provides the
IoHandler and associated ProtocolCodecFactory
required to implement the KDC's Authentication Service (AS) and
Ticket-Granting Service (TGS) with the MINA NIO framework. |
| org.apache.directory.server.kerberos.shared.crypto.checksum |
Provides support for checksum calculations.
|
| org.apache.directory.server.kerberos.shared.crypto.encryption |
Provides support for Kerberos CipherText operations.
|
| org.apache.directory.server.kerberos.shared.store |
Provides the implementation for storing Kerberos principals
and symmetric keys backed by JNDI.
|
| org.apache.directory.shared.kerberos | |
| org.apache.directory.shared.kerberos.codec | |
| org.apache.directory.shared.kerberos.exceptions |
| Modifier and Type | Method and Description |
|---|---|
(package private) TgTicket |
KdcConnection._getTgt(TgtRequest clientTgtReq) |
private ServiceTicket |
KdcConnection.getServiceTicket(ServiceTicketRequest srvTktReq) |
ServiceTicket |
KdcConnection.getServiceTicket(java.lang.String clientPrincipal,
java.lang.String password,
java.lang.String serverPrincipal)
Authenticates to the Kerberos server and gets a service ticket for the given server principal
|
TgTicket |
KdcConnection.getTgt(TgtRequest clientTgtReq) |
| Modifier and Type | Class and Description |
|---|---|
class |
ChangePasswordException
The root of the Change Password exception hierarchy.
|
| Modifier and Type | Method and Description |
|---|---|
private byte[] |
ChangePasswordProtocolHandler.buildExplanatoryData(KerberosException exception) |
private KrbError |
ChangePasswordProtocolHandler.getErrorMessage(javax.security.auth.kerberos.KerberosPrincipal principal,
KerberosException exception) |
| Modifier and Type | Method and Description |
|---|---|
private static void |
ChangePasswordService.buildReply(ChangePasswordContext changepwContext) |
private static void |
ChangePasswordService.getAuthHeader(ChangePasswordContext changepwContext) |
private static void |
ChangePasswordService.getServerEntry(ChangePasswordContext changepwContext) |
private static void |
ChangePasswordService.monitorContext(ChangePasswordContext changepwContext) |
private static void |
ChangePasswordService.monitorReply(ChangePasswordContext changepwContext) |
private static void |
ChangePasswordService.monitorRequest(ChangePasswordContext changepwContext) |
private static void |
ChangePasswordService.processPasswordChange(ChangePasswordContext changepwContext) |
private static void |
ChangePasswordService.verifyServiceTicket(ChangePasswordContext changepwContext) |
private static void |
ChangePasswordService.verifyServiceTicketAuthHeader(ChangePasswordContext changepwContext) |
| Modifier and Type | Method and Description |
|---|---|
private static void |
AuthenticationService.buildReply(AuthenticationContext authContext) |
private static void |
AuthenticationService.generateTicket(AuthenticationContext authContext) |
private static void |
AuthenticationService.getClientEntry(AuthenticationContext authContext) |
private static void |
AuthenticationService.getServerEntry(AuthenticationContext authContext) |
private static void |
AuthenticationService.selectEncryptionType(AuthenticationContext authContext) |
private static void |
AuthenticationService.verifyEncryptedTimestamp(AuthenticationContext authContext) |
private static void |
AuthenticationService.verifyPolicy(AuthenticationContext authContext) |
private static void |
AuthenticationService.verifySam(AuthenticationContext authContext) |
| Modifier and Type | Method and Description |
|---|---|
private static void |
TicketGrantingService.buildReply(TicketGrantingContext tgsContext) |
private static void |
TicketGrantingService.configureTicketGranting(TicketGrantingContext tgsContext) |
private static void |
TicketGrantingService.generateTicket(TicketGrantingContext tgsContext) |
static PrincipalStoreEntry |
TicketGrantingService.getEntry(javax.security.auth.kerberos.KerberosPrincipal principal,
PrincipalStore store,
ErrorType errorType)
Get a PrincipalStoreEntry given a principal.
|
static void |
TicketGrantingService.getRequestPrincipalEntry(TicketGrantingContext tgsContext) |
private static void |
TicketGrantingService.getTicketPrincipalEntry(TicketGrantingContext tgsContext) |
private static void |
TicketGrantingService.processFlags(KerberosConfig config,
KdcReq request,
Ticket tgt,
EncTicketPart newTicketPart) |
private static void |
TicketGrantingService.processTimes(KerberosConfig config,
KdcReq request,
EncTicketPart newTicketPart,
Ticket tgt) |
private static void |
TicketGrantingService.verifyBodyChecksum(TicketGrantingContext tgsContext)
RFC4120
Section 3.3.2.
|
static void |
TicketGrantingService.verifyTgt(TicketGrantingContext tgsContext) |
private static void |
TicketGrantingService.verifyTgtAuthHeader(TicketGrantingContext tgsContext) |
| Modifier and Type | Method and Description |
|---|---|
protected KrbError |
KerberosProtocolHandler.getErrorMessage(javax.security.auth.kerberos.KerberosPrincipal principal,
KerberosException exception)
Construct an error message given some conditions
|
| Modifier and Type | Method and Description |
|---|---|
Checksum |
ChecksumHandler.calculateChecksum(ChecksumType checksumType,
byte[] bytes,
byte[] key,
KeyUsage usage)
Calculate a checksum based on raw bytes and an (optional) key for keyed checksums.
|
private ChecksumEngine |
ChecksumHandler.getEngine(ChecksumType checksumType) |
void |
ChecksumHandler.verifyChecksum(Checksum checksum,
byte[] bytes,
byte[] key,
KeyUsage usage)
Verify a checksum by providing the raw bytes and an (optional) key for keyed checksums.
|
| Modifier and Type | Method and Description |
|---|---|
byte[] |
CipherTextHandler.decrypt(EncryptionKey key,
EncryptedData data,
KeyUsage usage)
Decrypt a block of data.
|
EncryptedData |
CipherTextHandler.encrypt(EncryptionKey key,
byte[] plainText,
KeyUsage usage) |
byte[] |
Des3CbcSha1KdEncryption.getDecryptedData(EncryptionKey key,
EncryptedData data,
KeyUsage usage) |
protected abstract byte[] |
EncryptionEngine.getDecryptedData(EncryptionKey key,
EncryptedData data,
KeyUsage usage) |
byte[] |
NullEncryption.getDecryptedData(EncryptionKey key,
EncryptedData data,
KeyUsage usage) |
byte[] |
AesCtsSha1Encryption.getDecryptedData(EncryptionKey key,
EncryptedData data,
KeyUsage usage) |
byte[] |
ArcFourHmacMd5Encryption.getDecryptedData(EncryptionKey key,
EncryptedData data,
KeyUsage usage) |
byte[] |
DesCbcCrcEncryption.getDecryptedData(EncryptionKey key,
EncryptedData data,
KeyUsage usage) |
byte[] |
DesCbcMd5Encryption.getDecryptedData(EncryptionKey key,
EncryptedData data,
KeyUsage usage) |
private EncryptionEngine |
CipherTextHandler.getEngine(EncryptionKey key) |
static EncryptionKey |
RandomKeyFactory.getRandomKey(EncryptionType encryptionType)
Get a new random key for a given
EncryptionType. |
static java.util.Map<EncryptionType,EncryptionKey> |
RandomKeyFactory.getRandomKeys()
Get a map of random keys.
|
static java.util.Map<EncryptionType,EncryptionKey> |
RandomKeyFactory.getRandomKeys(java.util.Set<EncryptionType> ciphers)
Get a map of random keys for a list of cipher types to derive keys for.
|
EncryptedData |
CipherTextHandler.seal(EncryptionKey key,
org.apache.directory.api.asn1.Asn1Object message,
KeyUsage usage)
Performs an encode and an encrypt.
|
| Modifier and Type | Method and Description |
|---|---|
Ticket |
TicketFactory.getTicket(javax.security.auth.kerberos.KerberosPrincipal clientPrincipal,
javax.security.auth.kerberos.KerberosPrincipal serverPrincipal,
EncryptionKey serverKey)
Build the service ticket.
|
java.util.Map<EncryptionType,EncryptionKey> |
PrincipalStoreEntryModifier.reconstituteKeyMap(org.apache.directory.api.ldap.model.entry.Attribute krb5key)
Converts the ASN.1 encoded key set to a map of encryption types to encryption keys.
|
| Modifier and Type | Method and Description |
|---|---|
static PrincipalStoreEntry |
KerberosUtils.getEntry(javax.security.auth.kerberos.KerberosPrincipal principal,
PrincipalStore store,
ErrorType errorType)
Get a PrincipalStoreEntry given a principal.
|
static Authenticator |
KerberosUtils.verifyAuthHeader(ApReq authHeader,
Ticket ticket,
EncryptionKey serverKey,
long clockSkew,
ReplayCache replayCache,
boolean emptyAddressesAllowed,
java.net.InetAddress clientAddress,
CipherTextHandler lockBox,
KeyUsage authenticatorKeyUsage,
boolean isValidate)
Verifies an AuthHeader using guidelines from RFC 1510 section A.10., "KRB_AP_REQ verification."
|
| Modifier and Type | Method and Description |
|---|---|
static ApRep |
KerberosDecoder.decodeApRep(byte[] data)
Decode a AP-REP structure
|
static ApReq |
KerberosDecoder.decodeApReq(byte[] data)
Decode a AP-REQ structure
|
static Authenticator |
KerberosDecoder.decodeAuthenticator(byte[] data)
Decode a Authenticator structure
|
static AuthorizationData |
KerberosDecoder.decodeAuthorizationData(byte[] data)
Decode a AuthorizationData structure
|
static EncApRepPart |
KerberosDecoder.decodeEncApRepPart(byte[] data)
Decode an EncApRepPart structure
|
static EncAsRepPart |
KerberosDecoder.decodeEncAsRepPart(byte[] data)
Decode an EncAsRepPart structure
|
static EncKdcRepPart |
KerberosDecoder.decodeEncKdcRepPart(byte[] data)
Decode an EncKdcRepPart structure
|
static EncKrbPrivPart |
KerberosDecoder.decodeEncKrbPrivPart(byte[] data)
Decode an EncKrbPrivPart structure
|
static EncryptedData |
KerberosDecoder.decodeEncryptedData(byte[] data)
Decode an EncrytedData structure
|
static EncryptionKey |
KerberosDecoder.decodeEncryptionKey(byte[] data)
Decode an EncryptionKey structure
|
static EncTicketPart |
KerberosDecoder.decodeEncTicketPart(byte[] data)
Decode an EncTicketPart structure
|
static KrbPriv |
KerberosDecoder.decodeKrbPriv(byte[] data)
Decode a KRB-PRIV structure
|
static PaEncTsEnc |
KerberosDecoder.decodePaEncTsEnc(byte[] data)
Decode an PaEncTsEnc structure
|
static PrincipalName |
KerberosDecoder.decodePrincipalName(byte[] data)
Decode an PrincipalName structure
|
static Ticket |
KerberosDecoder.decodeTicket(byte[] data)
Decode a Ticket structure
|
| Modifier and Type | Class and Description |
|---|---|
class |
InvalidTicketException
A exception used when there was an error while creating a Ticket
|