public class

KrbApReq

extends Object
java.lang.Object
   ↳ sun.security.mule.krb5.KrbApReq

Class Overview

This class encapsulates a KRB-AP-REQ that a client sends to a server for authentication.

Summary

Fields
private static boolean DEBUG
private boolean KDC_EMPTY_ADDRESSES_ALLOWED
private APReq apReqMessg
private Authenticator authenticator
private Credentials creds
private KerberosTime ctime
private int cusec
private Config kerberosConfig
private byte[] obuf
private static CacheTable table
Public Constructors
KrbApReq(Credentials tgsCred, boolean mutualRequired, boolean useSubKey, boolean useSeqNumber, Checksum cksum, Config kerberosConfig)
Contructs a AP-REQ message to send to the peer.
KrbApReq(byte[] message, EncryptionKey[] keys, InetAddress initiator, Config kerberosConfig)
Contructs a AP-REQ message from the bytes received from the peer.
Public Methods
Checksum getChecksum()
Returns the optional Checksum stored in the Authenticator for this message.
PrincipalName getClient()
Returns the principal name of the client that generated this message.
Credentials getCreds()
Returns the credentials that are contained in the ticket that is part of this this AP-REP.
byte[] getMessage()
Returns the ASN.1 encoding that should be sent to the peer.
boolean getMutualAuthRequired()
Returns true if mutual authentication is required and hence an AP-REP will need to be generated.
Integer getSeqNumber()
Returns the optional sequence number stored in the Authenticator for this message.
EncryptionKey getSubKey()
Returns the optional subkey stored in the Authenticator for this message.
[Expand]
Inherited Methods
From class java.lang.Object

Fields

private static boolean DEBUG

private boolean KDC_EMPTY_ADDRESSES_ALLOWED

private APReq apReqMessg

private Authenticator authenticator

private Credentials creds

private KerberosTime ctime

private int cusec

private Config kerberosConfig

private byte[] obuf

private static CacheTable table

Public Constructors

public KrbApReq (Credentials tgsCred, boolean mutualRequired, boolean useSubKey, boolean useSeqNumber, Checksum cksum, Config kerberosConfig)

Contructs a AP-REQ message to send to the peer.

Parameters
tgsCred The Credentials to be used to construct the AP Request protocol message.
mutualRequired Whether mutual authentication is required
useSubKey
useSeqNumber
cksum
kerberosConfig
Throws
KrbException for any Kerberos protocol specific error
IOException for any IO related errors (e.g. socket operations)
Asn1Exception
KrbCryptoException

public KrbApReq (byte[] message, EncryptionKey[] keys, InetAddress initiator, Config kerberosConfig)

Contructs a AP-REQ message from the bytes received from the peer.

Parameters
message The message received from the peer
keys EncrtyptionKeys to decrypt the message; key selected will depend on etype used to encrypte data
initiator
kerberosConfig
Throws
KrbException for any Kerberos protocol specific error
IOException for any IO related errors (e.g. socket operations)

Public Methods

public Checksum getChecksum ()

Returns the optional Checksum stored in the Authenticator for this message. Returns null if none is stored.

public PrincipalName getClient ()

Returns the principal name of the client that generated this message.

public Credentials getCreds ()

Returns the credentials that are contained in the ticket that is part of this this AP-REP.

public byte[] getMessage ()

Returns the ASN.1 encoding that should be sent to the peer.

public boolean getMutualAuthRequired ()

Returns true if mutual authentication is required and hence an AP-REP will need to be generated.

Throws
IOException
KrbException

public Integer getSeqNumber ()

Returns the optional sequence number stored in the Authenticator for this message. Returns null if none is stored.

public EncryptionKey getSubKey ()

Returns the optional subkey stored in the Authenticator for this message. Returns null if none is stored.