Top Fields Constructors Methods
org.keycloak.common.constants

public Class KerberosConstants

extends Object
Class Inheritance
Imports
org.ietf.jgss.GSSException, .Oid
Author
Marek Posolda

Field Summary

Modifier and TypeField and Description
public static final String
ALLOW_KERBEROS_AUTHENTICATION

Configuration federation provider model attributes.

public static final String
ALLOW_PASSWORD_AUTHENTICATION

public static final String
AUTHENTICATED_SPNEGO_CONTEXT

Attribute attached to the credential, which contains authenticated SPNEGO context.

public static final String
DEBUG

public static final String
GSS_DELEGATION_CREDENTIAL

Internal attribute used in "userSession.note" map and in accessToken claims .

public static final String
GSS_DELEGATION_CREDENTIAL_DISPLAY_NAME

Display name for the above in admin console and consent screens

public static final String
KERBEROS_PRINCIPAL

public static final String
KERBEROS_PRINCIPAL_ATTRIBUTE

public static final String
KERBEROS_PRINCIPAL_LDAP_ATTRIBUTE_KRB5_PRINCIPAL_NAME

public static final String
KERBEROS_PRINCIPAL_LDAP_ATTRIBUTE_KRB_PRINCIPAL_NAME

public static final String
KERBEROS_PRINCIPAL_LDAP_ATTRIBUTE_USER_PRINCIPAL_NAME

public static final String
KERBEROS_REALM

public static final String
KEYTAB

public static final Oid
KRB5_NAME_OID

private static final String
KRB5_NAME_OID_STR

OID of Kerberos v5 name.

public static final Oid
KRB5_OID

private static final String
KRB5_OID_STR

OID of Kerberos v5 mechanism.

public static final String
NEGOTIATE

Value of HTTP Headers "WWW-Authenticate" or "Authorization" used for SPNEGO/Kerberos

public static final String
RESPONSE_TOKEN

Internal attribute used in "state" map .

public static final String
SERVER_PRINCIPAL

public static final Oid
SPNEGO_OID

private static final String
SPNEGO_OID_STR

OID of SPNEGO mechanism.

public static final String
UPDATE_PROFILE_FIRST_LOGIN

public static final String
USE_KERBEROS_FOR_PASSWORD_AUTHENTICATION

Constructor Summary

AccessConstructor and Description
public
KerberosConstants()

Method Summary

Inherited from java.lang.Object:
cloneequalsfinalizegetClasshashCodenotifynotifyAlltoStringwaitwaitwait

Field Detail

ALLOW_KERBEROS_AUTHENTICATIONback to summary
public static final String ALLOW_KERBEROS_AUTHENTICATION

Configuration federation provider model attributes.

ALLOW_PASSWORD_AUTHENTICATIONback to summary
public static final String ALLOW_PASSWORD_AUTHENTICATION
AUTHENTICATED_SPNEGO_CONTEXTback to summary
public static final String AUTHENTICATED_SPNEGO_CONTEXT

Attribute attached to the credential, which contains authenticated SPNEGO context. This is used in case that some LDAP/Kerberos provider was able to authenticate user via SPNEGO, but wasn't able to lookup it in his LDAP tree. In this case, LDAP lookup might be performed by other providers in the chain.

DEBUGback to summary
public static final String DEBUG
GSS_DELEGATION_CREDENTIALback to summary
public static final String GSS_DELEGATION_CREDENTIAL

Internal attribute used in "userSession.note" map and in accessToken claims . Contains credential from SPNEGO/Kerberos successful authentication

GSS_DELEGATION_CREDENTIAL_DISPLAY_NAMEback to summary
public static final String GSS_DELEGATION_CREDENTIAL_DISPLAY_NAME

Display name for the above in admin console and consent screens

KERBEROS_PRINCIPALback to summary
public static final String KERBEROS_PRINCIPAL
KERBEROS_PRINCIPAL_ATTRIBUTEback to summary
public static final String KERBEROS_PRINCIPAL_ATTRIBUTE
KERBEROS_PRINCIPAL_LDAP_ATTRIBUTE_KRB5_PRINCIPAL_NAMEback to summary
public static final String KERBEROS_PRINCIPAL_LDAP_ATTRIBUTE_KRB5_PRINCIPAL_NAME
KERBEROS_PRINCIPAL_LDAP_ATTRIBUTE_KRB_PRINCIPAL_NAMEback to summary
public static final String KERBEROS_PRINCIPAL_LDAP_ATTRIBUTE_KRB_PRINCIPAL_NAME
KERBEROS_PRINCIPAL_LDAP_ATTRIBUTE_USER_PRINCIPAL_NAMEback to summary
public static final String KERBEROS_PRINCIPAL_LDAP_ATTRIBUTE_USER_PRINCIPAL_NAME
KERBEROS_REALMback to summary
public static final String KERBEROS_REALM
KEYTABback to summary
public static final String KEYTAB
KRB5_NAME_OIDback to summary
public static final Oid KRB5_NAME_OID
KRB5_NAME_OID_STRback to summary
private static final String KRB5_NAME_OID_STR

OID of Kerberos v5 name. See http://www.oid-info.com/get/1.2.840.113554.1.2.2.1

KRB5_OIDback to summary
public static final Oid KRB5_OID
KRB5_OID_STRback to summary
private static final String KRB5_OID_STR

OID of Kerberos v5 mechanism. See http://www.oid-info.com/get/1.2.840.113554.1.2.2

NEGOTIATEback to summary
public static final String NEGOTIATE

Value of HTTP Headers "WWW-Authenticate" or "Authorization" used for SPNEGO/Kerberos

RESPONSE_TOKENback to summary
public static final String RESPONSE_TOKEN

Internal attribute used in "state" map . Contains token to be passed in HTTP Response back to browser to continue handshake

SERVER_PRINCIPALback to summary
public static final String SERVER_PRINCIPAL
SPNEGO_OIDback to summary
public static final Oid SPNEGO_OID
SPNEGO_OID_STRback to summary
private static final String SPNEGO_OID_STR

OID of SPNEGO mechanism. See http://www.oid-info.com/get/1.3.6.1.5.5.2

UPDATE_PROFILE_FIRST_LOGINback to summary
public static final String UPDATE_PROFILE_FIRST_LOGIN
USE_KERBEROS_FOR_PASSWORD_AUTHENTICATIONback to summary
public static final String USE_KERBEROS_FOR_PASSWORD_AUTHENTICATION

Constructor Detail

KerberosConstantsback to summary
public KerberosConstants()