org.apache.kerby.kerberos.kerb.client.preauth.pkinit

Class PkinitPreauth

java.lang.Object

org.apache.kerby.kerberos.kerb.client.preauth.AbstractPreauthPlugin

org.apache.kerby.kerberos.kerb.client.preauth.pkinit.PkinitPreauth

All Implemented Interfaces:

KrbPreauth, PreauthPluginMeta

public class PkinitPreauth
extends AbstractPreauthPlugin

Field Summary

Fields inherited from class org.apache.kerby.kerberos.kerb.client.preauth.AbstractPreauthPlugin

context

Constructor Summary

Constructors

Constructor and Description
PkinitPreauth()

Method Summary

Modifier and Type	Method and Description
PaFlags	getFlags(PaDataType paType) Return PA_REAL if pa_type is a real preauthentication type or PA_INFO if it is an informational type.
void	init(KrbContext context) Initializing preauth plugin context
PluginRequestContext	initRequestContext(KdcRequest kdcRequest) Initializing request context
void	prepareQuestions(KdcRequest kdcRequest, PluginRequestContext requestContext) Prepare questions to prompt to you asking for credential
boolean	process(KdcRequest kdcRequest, PluginRequestContext requestContext, PaDataEntry inPadata, PaData outPadata) Process server returned paData and return back any result paData
void	setPreauthOptions(KdcRequest kdcRequest, PluginRequestContext requestContext, org.apache.kerby.KOptions options) Set krb options passed from user
boolean	tryAgain(KdcRequest kdcRequest, PluginRequestContext requestContext, PaDataType preauthType, PaData errPadata, PaData outPadata) When another request to server in the 4 pass, any paData to provide?
void	tryFirst(KdcRequest kdcRequest, PluginRequestContext requestContext, PaData outPadata) Attempt to try any initial padata derived from user options

Methods inherited from class org.apache.kerby.kerberos.kerb.client.preauth.AbstractPreauthPlugin

destroy, getEncTypes, getName, getPaTypes, getVersion

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PkinitPreauth

public PkinitPreauth()

Method Detail

init

public void init(KrbContext context)

Initializing preauth plugin context

Specified by:

init in interface KrbPreauth

Overrides:

init in class AbstractPreauthPlugin

Parameters:

context - The krb context

initRequestContext

public PluginRequestContext initRequestContext(KdcRequest kdcRequest)

Initializing request context

Specified by:

initRequestContext in interface KrbPreauth

Overrides:

initRequestContext in class AbstractPreauthPlugin

Parameters:

kdcRequest - The kdc request

Returns:

PluginRequestContext

setPreauthOptions

public void setPreauthOptions(KdcRequest kdcRequest,
                              PluginRequestContext requestContext,
                              org.apache.kerby.KOptions options)

Set krb options passed from user

Specified by:

setPreauthOptions in interface KrbPreauth

Overrides:

setPreauthOptions in class AbstractPreauthPlugin

Parameters:

kdcRequest - The kdc request

requestContext - The request context

options - The preauth options

prepareQuestions

public void prepareQuestions(KdcRequest kdcRequest,
                             PluginRequestContext requestContext)

Prepare questions to prompt to you asking for credential

Specified by:

prepareQuestions in interface KrbPreauth

Overrides:

prepareQuestions in class AbstractPreauthPlugin

Parameters:

kdcRequest - The kdc request

requestContext - The request context

tryFirst

public void tryFirst(KdcRequest kdcRequest,
                     PluginRequestContext requestContext,
                     PaData outPadata)
              throws KrbException

Attempt to try any initial padata derived from user options

Specified by:

tryFirst in interface KrbPreauth

Overrides:

tryFirst in class AbstractPreauthPlugin

Parameters:

kdcRequest - The kdc request

requestContext - The request context

outPadata - The outPadata

Throws:

KrbException - e

process

public boolean process(KdcRequest kdcRequest,
                       PluginRequestContext requestContext,
                       PaDataEntry inPadata,
                       PaData outPadata)
                throws KrbException

Process server returned paData and return back any result paData

Specified by:

process in interface KrbPreauth

Overrides:

process in class AbstractPreauthPlugin

Parameters:

kdcRequest - The kdc request

requestContext - The request context

inPadata - The inPadata

outPadata - The outPadata

Returns:

true indicating padata is added

Throws:

KrbException - e

tryAgain

public boolean tryAgain(KdcRequest kdcRequest,
                        PluginRequestContext requestContext,
                        PaDataType preauthType,
                        PaData errPadata,
                        PaData outPadata)

When another request to server in the 4 pass, any paData to provide?

Specified by:

tryAgain in interface KrbPreauth

Overrides:

tryAgain in class AbstractPreauthPlugin

Parameters:

kdcRequest - The kdc request

requestContext - The request context

preauthType - The preauth type

errPadata - The error padata

outPadata - The outPadata

Returns:

true indicating padata is added

getFlags

public PaFlags getFlags(PaDataType paType)

Return PA_REAL if pa_type is a real preauthentication type or PA_INFO if it is an informational type.

Specified by:

getFlags in interface KrbPreauth

Overrides:

getFlags in class AbstractPreauthPlugin

Parameters:

paType - The pa_type

Returns:

PaFlags