org.apache.kerby.kerberos.kerb.server.preauth.pkinit

Class PkinitPreauth

java.lang.Object

org.apache.kerby.kerberos.kerb.server.preauth.AbstractPreauthPlugin

org.apache.kerby.kerberos.kerb.server.preauth.pkinit.PkinitPreauth

All Implemented Interfaces:

PreauthPluginMeta, KdcPreauth

public class PkinitPreauth
extends AbstractPreauthPlugin

Constructor Summary

Constructors

Constructor and Description
PkinitPreauth()

Method Summary

Modifier and Type	Method and Description
PluginRequestContext	initRequestContext(KdcRequest kdcRequest) Initializing request context
void	initWith(KdcContext kdcContext) Initializing plugin context for each realm
boolean	verify(KdcRequest kdcRequest, PluginRequestContext requestContext, PaDataEntry paData) Optional: verify preauthentication data sent by the client, setting the TKT_FLG_PRE_AUTH or TKT_FLG_HW_AUTH flag in the enc_tkt_reply's "flags" field as appropriate.

Methods inherited from class org.apache.kerby.kerberos.kerb.server.preauth.AbstractPreauthPlugin

destroy, getFlags, getName, getPaTypes, getVersion, provideEdata, providePaData

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PkinitPreauth

public PkinitPreauth()

Method Detail

initWith

public void initWith(KdcContext kdcContext)

Description copied from interface: KdcPreauth

Initializing plugin context for each realm

Specified by:

initWith in interface KdcPreauth

Overrides:

initWith in class AbstractPreauthPlugin

Parameters:

kdcContext - kdc context

initRequestContext

public PluginRequestContext initRequestContext(KdcRequest kdcRequest)

Description copied from interface: KdcPreauth

Initializing request context

Specified by:

initRequestContext in interface KdcPreauth

Overrides:

initRequestContext in class AbstractPreauthPlugin

Parameters:

kdcRequest - kdc context

Returns:

request context

verify

public boolean verify(KdcRequest kdcRequest,
                      PluginRequestContext requestContext,
                      PaDataEntry paData)
               throws KrbException

Description copied from interface: KdcPreauth

Optional: verify preauthentication data sent by the client, setting the TKT_FLG_PRE_AUTH or TKT_FLG_HW_AUTH flag in the enc_tkt_reply's "flags" field as appropriate.

Specified by:

verify in interface KdcPreauth

Overrides:

verify in class AbstractPreauthPlugin

Parameters:

kdcRequest - kdc request

requestContext - request context

paData - preauthentication data

Returns:

true if verify success

Throws:

KrbException - e