| java.lang.Object |
| ↳ |
sun.security.mule.jgss.krb5.Krb5Util |
Class Overview
Utilities for obtaining and converting Kerberos tickets.
Summary
| Fields |
|---|
|
static
final
boolean |
DEBUG |
|
| Public Methods |
|---|
|
static
KerberosTicket
|
credsToTicket(Credentials serviceCreds)
|
|
static
KerberosKey[]
|
getKeys(int caller, String serverPrincipal, AccessControlContext acc)
Retrieves the keys for the specified server principal from
the Subject in the specified AccessControlContext.
|
|
static
Subject
|
getSubject(int caller, AccessControlContext acc)
Retrieves the caller's Subject, or Subject obtained by logging in
via the specified caller.
|
|
static
KerberosTicket
|
getTicketFromSubjectAndTgs(int caller, String clientPrincipal, String serverPrincipal, String tgsPrincipal, AccessControlContext acc, Config kerberosConfig)
Retrieve the service ticket for serverPrincipal from caller's Subject
or from Subject obtained by logging in, or if not found, via the
Ticket Granting Service using the TGT obtained from the Subject.
|
|
static
Credentials
|
ticketToCreds(KerberosTicket kerbTicket, Config kerberosConfig)
|
|
[Expand]
Inherited Methods |
|---|
From class
java.lang.Object
|
Object
|
clone()
|
|
boolean
|
equals(Object arg0)
|
|
void
|
finalize()
|
|
final
Class<?>
|
getClass()
|
|
int
|
hashCode()
|
|
final
void
|
notify()
|
|
final
void
|
notifyAll()
|
|
String
|
toString()
|
|
final
void
|
wait()
|
|
final
void
|
wait(long arg0, int arg1)
|
|
final
void
|
wait(long arg0)
|
|
Fields
static
final
boolean
DEBUG
Public Methods
public
static
KerberosTicket
credsToTicket
(Credentials serviceCreds)
public
static
KerberosKey[]
getKeys
(int caller, String serverPrincipal, AccessControlContext acc)
Retrieves the keys for the specified server principal from
the Subject in the specified AccessControlContext.
If the ticket can not be found in the Subject, and if
useSubjectCredsOnly is false, then obtain keys from
a LoginContext.
NOTE: This method is used by JSSE Kerberos Cipher Suites
Parameters
| caller
| |
| serverPrincipal
| |
| acc
| |
public
static
Subject
getSubject
(int caller, AccessControlContext acc)
Retrieves the caller's Subject, or Subject obtained by logging in
via the specified caller.
Caller must have permission to:
- access the Subject
- create LoginContext
- read the auth.login.defaultCallbackHandler security property
NOTE: This method is used by JSSE Kerberos Cipher Suites
public
static
KerberosTicket
getTicketFromSubjectAndTgs
(int caller, String clientPrincipal, String serverPrincipal, String tgsPrincipal, AccessControlContext acc, Config kerberosConfig)
Retrieve the service ticket for serverPrincipal from caller's Subject
or from Subject obtained by logging in, or if not found, via the
Ticket Granting Service using the TGT obtained from the Subject.
Caller must have permission to:
- access and update Subject's private credentials
- create LoginContext
- read the auth.login.defaultCallbackHandler security property
NOTE: This method is used by JSSE Kerberos Cipher Suites
Parameters
| caller
| |
| clientPrincipal
| |
| serverPrincipal
| |
| tgsPrincipal
| |
| acc
| |
| kerberosConfig
| |
public
static
Credentials
ticketToCreds
(KerberosTicket kerbTicket, Config kerberosConfig)
Parameters
| kerbTicket
| |
| kerberosConfig
| |
