Modifier and Type	Class and Description
pack-priv static class	KrbAsReqBuilder.ReferralsState
private static enum	KrbAsReqBuilder.State

Field Summary

Modifier and Type	Field and Description
private HostAddresses	addresses
private PrincipalName	cname
private KerberosTime	from
private final KeyTab	ktab
private KDCOptions	options
private PAData[]	paList
private final char[]	password
private PrincipalName	refCname
private KrbAsRep	rep
private KrbAsReq	req
private KerberosTime	rtime
private PrincipalName	sname
private KrbAsReqBuilder.State	state
private KerberosTime	till

Constructor Summary

Access Constructor and Description

Access	Constructor and Description
public	KrbAsReqBuilder(PrincipalName the client of the AS-REQ. Must not be null. Might have no realm, where default realm will be used. This realm will be the target realm for AS-REQ. I believe a client should only get initial TGT from its own realm. cname, KeyTab must not be null. If empty, might be quite useless. This argument will neither be modified nor stored by the method. ktab) Creates a builder to be used by `cname` with existing keys.
public	KrbAsReqBuilder(PrincipalName the client of the AS-REQ. Must not be null. Might have no realm, where default realm will be used. This realm will be the target realm for AS-REQ. I believe a client should only get initial TGT from its own realm. cname, char[] must not be null. This argument will neither be modified nor stored by the method. pass) Creates a builder to be used by `cname` with a known password.

public

KrbAsReqBuilder(PrincipalName

the client of the AS-REQ. Must not be null. Might have no realm, where default realm will be used. This realm will be the target realm for AS-REQ. I believe a client should only get initial TGT from its own realm.

cname, KeyTab

must not be null. If empty, might be quite useless. This argument will neither be modified nor stored by the method.

ktab)

Creates a builder to be used by cname with existing keys.

public

KrbAsReqBuilder(PrincipalName

cname, char[]

must not be null. This argument will neither be modified nor stored by the method.

pass)

Creates a builder to be used by cname with a known password.

Method Summary

Modifier and Type	Method and Description
public KrbAsReqBuilder	action() Performs AS-REQ send and AS-REP receive.
private KrbAsReq	Returns: the KrbAsReq object build(EncryptionKey null (initial AS-REQ) or pakey (with preauth) key, KrbAsReqBuilder.ReferralsState referralsState) Build a KrbAsReq object from all info fed above.
private void	checkState(KrbAsReqBuilder.State the expected state st, String error message if state is not correct msg) Checks if the current state is the specified one.
public void	destroy() Destroys the object and clears keys and password info.
public Credentials	getCCreds() Gets another type of Credentials after action
public Credentials	getCreds() Gets Credentials object after action
public EncryptionKey[]	Returns: generated keys from password. PA-DATA from server might be used. All "default_tkt_enctypes" keys will be generated, Never null. getKeys(boolean if the caller is an initiator isInitiator) Retrieves an array of secret keys for the client.
private void	init(PrincipalName cname)
private KrbAsReqBuilder	resolve() Parses AS-REP, decrypts enc-part, retrieves ticket and session key
private KrbAsReqBuilder	send() Communication until AS-REP or non preauth-related KRB-ERROR received
public void	setAddresses(HostAddresses addresses) Adds or clears addresses.
public void	setOptions(KDCOptions options) Sets or clears options.
public void	setRTime(KerberosTime rtime)
public void	setTarget(PrincipalName sname) Sets or clears target.
public void	setTill(KerberosTime till)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

addresses	back to summary
private HostAddresses addresses

cname	back to summary
private PrincipalName cname

from	back to summary
private KerberosTime from

ktab	back to summary
private final KeyTab ktab

options	back to summary
private KDCOptions options

paList	back to summary
private PAData[] paList

password	back to summary
private final char[] password

refCname	back to summary
private PrincipalName refCname

rep	back to summary
private KrbAsRep rep

req	back to summary
private KrbAsReq req

rtime	back to summary
private KerberosTime rtime

sname	back to summary
private PrincipalName sname

state	back to summary
private KrbAsReqBuilder.State state

till	back to summary
private KerberosTime till

Constructor Detail

KrbAsReqBuilder back to summary

KrbAsReqBuilder	back to summary
public KrbAsReqBuilder(PrincipalName cname, KeyTab ktab) throws KrbException Creates a builder to be used by `cname` with existing keys. Parameters cname:PrincipalName the client of the AS-REQ. Must not be null. Might have no realm, where default realm will be used. This realm will be the target realm for AS-REQ. I believe a client should only get initial TGT from its own realm. ktab:KeyTab must not be null. If empty, might be quite useless. This argument will neither be modified nor stored by the method.

public KrbAsReqBuilder(PrincipalName cname, KeyTab ktab) throws KrbException

Creates a builder to be used by cname with existing keys.

Parameters

cname:PrincipalName: the client of the AS-REQ. Must not be null. Might have no realm, where default realm will be used. This realm will be the target realm for AS-REQ. I believe a client should only get initial TGT from its own realm.
ktab:KeyTab: must not be null. If empty, might be quite useless. This argument will neither be modified nor stored by the method.

KrbAsReqBuilder back to summary

KrbAsReqBuilder	back to summary
public KrbAsReqBuilder(PrincipalName cname, char[] pass) throws KrbException Creates a builder to be used by `cname` with a known password. Parameters cname:PrincipalName the client of the AS-REQ. Must not be null. Might have no realm, where default realm will be used. This realm will be the target realm for AS-REQ. I believe a client should only get initial TGT from its own realm. pass:char[] must not be null. This argument will neither be modified nor stored by the method.

public KrbAsReqBuilder(PrincipalName cname, char[] pass) throws KrbException

Creates a builder to be used by cname with a known password.

Parameters

cname:PrincipalName: the client of the AS-REQ. Must not be null. Might have no realm, where default realm will be used. This realm will be the target realm for AS-REQ. I believe a client should only get initial TGT from its own realm.
pass:char[]: must not be null. This argument will neither be modified nor stored by the method.

Method Detail

action	back to summary
public KrbAsReqBuilder action() throws KrbException, Asn1Exception, IOException Performs AS-REQ send and AS-REP receive. Maybe a state is needed here, to divide prepare process and getCreds.

build	back to summary
private KrbAsReq build(EncryptionKey key, KrbAsReqBuilder.ReferralsState referralsState) throws KrbException, IOException Build a KrbAsReq object from all info fed above. Normally this method will be called twice: initial AS-REQ and second with pakey Parameters key:EncryptionKey null (initial AS-REQ) or pakey (with preauth) Returns:KrbAsReq the KrbAsReq object

build

back to summary

private KrbAsReq build(EncryptionKey key, KrbAsReqBuilder.ReferralsState referralsState) throws KrbException, IOException

Build a KrbAsReq object from all info fed above. Normally this method will be called twice: initial AS-REQ and second with pakey

Parameters

key:EncryptionKey: null (initial AS-REQ) or pakey (with preauth)

Returns:KrbAsReq

the KrbAsReq object

checkState	back to summary
private void checkState(KrbAsReqBuilder.State st, String msg) Checks if the current state is the specified one. Parameters st:KrbAsReqBuilder.State the expected state msg:String error message if state is not correct Exceptions IllegalStateException: if state is not correct

checkState

back to summary

private void checkState(KrbAsReqBuilder.State st, String msg)

Checks if the current state is the specified one.

Parameters

st:KrbAsReqBuilder.State: the expected state
msg:String: error message if state is not correct

Exceptions

IllegalStateException:: if state is not correct

destroy	back to summary
public void destroy() Destroys the object and clears keys and password info.

getCCreds	back to summary
public Credentials getCCreds() Gets another type of Credentials after action

getCreds	back to summary
public Credentials getCreds() Gets Credentials object after action

getKeys	back to summary
public EncryptionKey[] getKeys(boolean isInitiator) throws KrbException Retrieves an array of secret keys for the client. This is used when the client supplies password but need keys to act as an acceptor. For an initiator, it must be called after AS-REQ is performed (state is OK). For an acceptor, it can be called when this KrbAsReqBuilder object is constructed (state is INIT). Parameters isInitiator:boolean if the caller is an initiator Returns:EncryptionKey[] generated keys from password. PA-DATA from server might be used. All "default_tkt_enctypes" keys will be generated, Never null. Exceptions IllegalStateException: if not constructed from a password

getKeys

back to summary

public EncryptionKey[] getKeys(boolean isInitiator) throws KrbException

Retrieves an array of secret keys for the client. This is used when the client supplies password but need keys to act as an acceptor. For an initiator, it must be called after AS-REQ is performed (state is OK). For an acceptor, it can be called when this KrbAsReqBuilder object is constructed (state is INIT).

Parameters

isInitiator:boolean: if the caller is an initiator

Returns:EncryptionKey[]

generated keys from password. PA-DATA from server might be used. All "default_tkt_enctypes" keys will be generated, Never null.

Exceptions

IllegalStateException:: if not constructed from a password

init	back to summary
private void init(PrincipalName cname) throws KrbException

resolve	back to summary
private KrbAsReqBuilder resolve() throws KrbException, Asn1Exception, IOException Parses AS-REP, decrypts enc-part, retrieves ticket and session key

send	back to summary
private KrbAsReqBuilder send() throws KrbException, IOException Communication until AS-REP or non preauth-related KRB-ERROR received

setAddresses	back to summary
public void setAddresses(HostAddresses addresses) Adds or clears addresses. KrbAsReq might add some if empty field not allowed

setOptions	back to summary
public void setOptions(KDCOptions options) Sets or clears options. If cleared, default options will be used at creation time.

setRTime	back to summary
public void setRTime(KerberosTime rtime)

setTarget	back to summary
public void setTarget(PrincipalName sname) Sets or clears target. If cleared, KrbAsReq might choose krbtgt for cname realm

setTill	back to summary
public void setTill(KerberosTime till)

sun.security.krb5 back to summary

pack-priv final Class KrbAsReqBuilder.ReferralsState

Class Inheritance

extends Object

java.lang.Object
sun.security.krb5.KrbAsReqBuilder.ReferralsState

Field Summary

Modifier and Type	Field and Description
private static boolean	canonicalizeConfig
private int	count
private boolean	enabled
private boolean	isEnterpriseCname
private boolean	refreshComm
private KrbAsReqBuilder	reqBuilder
private boolean	sendCanonicalize

Constructor Summary

Access	Constructor and Description
pack-priv	ReferralsState(KrbAsReqBuilder reqBuilder)

Method Summary

Modifier and Type	Method and Description
pack-priv boolean	handleError(KrbException ke)
pack-priv static void	initStatic()
pack-priv boolean	isEnabled()
pack-priv boolean	refreshComm()
pack-priv boolean	sendCanonicalize()
private void	updateStatus()

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

canonicalizeConfig	back to summary
private static boolean canonicalizeConfig

count	back to summary
private int count

enabled	back to summary
private boolean enabled

isEnterpriseCname	back to summary
private boolean isEnterpriseCname

refreshComm	back to summary
private boolean refreshComm

reqBuilder	back to summary
private KrbAsReqBuilder reqBuilder

sendCanonicalize	back to summary
private boolean sendCanonicalize

Constructor Detail

ReferralsState	back to summary
pack-priv ReferralsState(KrbAsReqBuilder reqBuilder) throws KrbException

Method Detail

handleError	back to summary
pack-priv boolean handleError(KrbException ke) throws RealmException

initStatic	back to summary
pack-priv static void initStatic()

isEnabled	back to summary
pack-priv boolean isEnabled()

refreshComm	back to summary
pack-priv boolean refreshComm()

sendCanonicalize	back to summary
pack-priv boolean sendCanonicalize()

updateStatus	back to summary
private void updateStatus()

sun.security.krb5 back to summary

private final Enum KrbAsReqBuilder.State

Class Inheritance

extends Enum<KrbAsReqBuilder.State>

java.lang.Object
java.lang.Enum
sun.security.krb5.KrbAsReqBuilder.State

Field Summary

Modifier and Type	Field and Description
public static final KrbAsReqBuilder.State	DESTROYED
public static final KrbAsReqBuilder.State	INIT
public static final KrbAsReqBuilder.State	REQ_OK

Constructor Summary

Access	Constructor and Description
private	State()

Method Summary

Modifier and Type	Method and Description
public static KrbAsReqBuilder.State	valueOf(String name)
public static KrbAsReqBuilder.State[]	values()

Inherited from java.lang.Enum:: clone compareTo describeConstable equals finalize getDeclaringClass hashCode name ordinal toString valueOf

Field Detail

DESTROYED	back to summary
public static final KrbAsReqBuilder.State DESTROYED

INIT	back to summary
public static final KrbAsReqBuilder.State INIT

REQ_OK	back to summary
public static final KrbAsReqBuilder.State REQ_OK

Constructor Detail

State	back to summary
private State()

Method Detail

valueOf	back to summary
public static KrbAsReqBuilder.State valueOf(String name)

values	back to summary
public static KrbAsReqBuilder.State[] values()

public final Class KrbAsReqBuilder

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

pack-priv final Class KrbAsReqBuilder.ReferralsState

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

private final Enum KrbAsReqBuilder.State

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail