Java Krb5类代码示例

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
private static String[] doInitialParse(String cRealm, String sRealm)
throws KrbException {
    if (cRealm == null || sRealm == null){
        throw new KrbException(Krb5.API_INVALID_ARG);
    }
    if (DEBUG) {
        System.out.println(">>> Realm doInitialParse: cRealm=["
                           + cRealm + "], sRealm=[" +sRealm + "]");
    }
    if (cRealm.equals(sRealm)) {
        String[] retList = null;
        retList = new String[1];
        retList[0] = new String(cRealm);

        if (DEBUG) {
            System.out.println(">>> Realm doInitialParse: "
                               + retList[0]);
        }
        return retList;
    }
    return null;
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
public static void main(String[] args)
        throws Exception {

    new OneKDC(null).writeJAASConf();

    Context c, s;
    c = Context.fromJAAS("client");
    s = Context.fromJAAS("server");

    c.startAsClient(OneKDC.SERVER, GSSUtil.GSS_KRB5_MECH_OID);
    s.startAsServer(GSSUtil.GSS_KRB5_MECH_OID);

    byte[] first = c.take(new byte[0]);
    s.take(first);

    s.startAsServer(GSSUtil.GSS_KRB5_MECH_OID);
    try {
        s.take(first);  // Replay the last token sent
        throw new Exception("This method should fail");
    } catch (GSSException gsse) {
        KrbException ke = (KrbException)gsse.getCause();
        if (ke.returnCode() != Krb5.KRB_AP_ERR_REPEAT) {
            throw gsse;
        }
    }
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
/**
 * Locate Kerberos realm using DNS
 *
 * @return the Kerberos realm
 */
private String getRealmFromDNS() throws KrbException {
    // use DNS to locate Kerberos realm
    String realm = null;
    String hostName = null;
    try {
        hostName = InetAddress.getLocalHost().getCanonicalHostName();
    } catch (UnknownHostException e) {
        KrbException ke = new KrbException(Krb5.KRB_ERR_GENERIC,
            "Unable to locate Kerberos realm: " + e.getMessage());
        ke.initCause(e);
        throw (ke);
    }
    // get the domain realm mapping from the configuration
    String mapRealm = PrincipalName.mapHostToRealm(hostName);
    if (mapRealm == null) {
        // No match. Try search and/or domain in /etc/resolv.conf
        List<String> srchlist = ResolverConfiguration.open().searchlist();
        for (String domain: srchlist) {
            realm = checkRealm(domain);
            if (realm != null) {
                break;
            }
        }
    } else {
        realm = checkRealm(mapRealm);
    }
    if (realm == null) {
        throw new KrbException(Krb5.KRB_ERR_GENERIC,
                            "Unable to locate Kerberos realm");
    }
    return realm;
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
/**
 * Locate KDC using DNS
 *
 * @param realm the realm for which the master KDC is desired
 * @return the KDC
 */
private String getKDCFromDNS(String realm) throws KrbException {
    // use DNS to locate KDC
    String kdcs = "";
    String[] srvs = null;
    // locate DNS SRV record using UDP
    if (DEBUG) {
        System.out.println("getKDCFromDNS using UDP");
    }
    srvs = KrbServiceLocator.getKerberosService(realm, "_udp");
    if (srvs == null) {
        // locate DNS SRV record using TCP
        if (DEBUG) {
            System.out.println("getKDCFromDNS using TCP");
        }
        srvs = KrbServiceLocator.getKerberosService(realm, "_tcp");
    }
    if (srvs == null) {
        // no DNS SRV records
        throw new KrbException(Krb5.KRB_ERR_GENERIC,
            "Unable to locate KDC for realm " + realm);
    }
    if (srvs.length == 0) {
        return null;
    }
    for (int i = 0; i < srvs.length; i++) {
        kdcs += srvs[i].trim() + " ";
    }
    kdcs = kdcs.trim();
    if (kdcs.equals("")) {
        return null;
    }
    return kdcs;
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
/**
 * Constructs a Realm object.
 * @param encoding a Der-encoded data.
 * @exception Asn1Exception if an error occurs while decoding an ASN1 encoded data.
 * @exception IOException if an I/O error occurs while reading encoded data.
 * @exception RealmException if an error occurs while parsing a Realm object.
 */
public Realm(DerValue encoding)
    throws Asn1Exception, RealmException, IOException {
    if (encoding == null) {
        throw new IllegalArgumentException("encoding can not be null");
    }
    realm = new KerberosString(encoding).toString();
    if (realm == null || realm.length() == 0)
        throw new RealmException(Krb5.REALM_NULL);
    if (!isValidRealmString(realm))
        throw new RealmException(Krb5.REALM_ILLCHAR);
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
public static String parseRealmAtSeparator(String name)
    throws RealmException {
    if (name == null) {
        throw new IllegalArgumentException
            ("null input name is not allowed");
    }
    String temp = new String(name);
    String result = null;
    int i = 0;
    while (i < temp.length()) {
        if (temp.charAt(i) == PrincipalName.NAME_REALM_SEPARATOR) {
            if (i == 0 || temp.charAt(i - 1) != '\\') {
                if (i + 1 < temp.length()) {
                    result = temp.substring(i + 1, temp.length());
                } else {
                    throw new IllegalArgumentException
                            ("empty realm part not allowed");
                }
                break;
            }
        }
        i++;
    }
    if (result != null) {
        if (result.length() == 0)
            throw new RealmException(Krb5.REALM_NULL);
        if (!isValidRealmString(result))
            throw new RealmException(Krb5.REALM_ILLCHAR);
    }
    return result;
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
protected static String parseRealm(String name) throws RealmException {
    String result = parseRealmAtSeparator(name);
    if (result == null)
        result = name;
    if (result == null || result.length() == 0)
        throw new RealmException(Krb5.REALM_NULL);
    if (!isValidRealmString(result))
        throw new RealmException(Krb5.REALM_ILLCHAR);
    return result;
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
/**
 * Parse (unmarshal) a realm from a DER input stream.  This form
 * parsing might be used when expanding a value which is part of
 * a constructed sequence and uses explicitly tagged type.
 *
 * @exception Asn1Exception on error.
 * @param data the Der input stream value, which contains one or more marshaled value.
 * @param explicitTag tag number.
 * @param optional indicate if this data field is optional
 * @return an instance of Realm.
 *
 */
public static Realm parse(DerInputStream data, byte explicitTag, boolean optional)
        throws Asn1Exception, IOException, RealmException {
    if ((optional) && (((byte)data.peekByte() & (byte)0x1F) != explicitTag)) {
        return null;
    }
    DerValue der = data.getDerValue();
    if (explicitTag != (der.getTag() & (byte)0x1F))  {
        throw new Asn1Exception(Krb5.ASN1_BAD_ID);
    } else {
        DerValue subDer = der.getData().getDerValue();
        return new Realm(subDer);
    }
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
public KdcComm(String realm) throws KrbException {
    if (realm == null) {
       realm = Config.getInstance().getDefaultRealm();
        if (realm == null) {
            throw new KrbException(Krb5.KRB_ERR_GENERIC,
                                   "Cannot find default realm");
        }
    }
    this.realm = realm;
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
@Override
public void checkAndStore(KerberosTime currTime, AuthTimeWithHash time)
        throws KrbApErrException {
    try {
        checkAndStore0(currTime, time);
    } catch (IOException ioe) {
        KrbApErrException ke = new KrbApErrException(Krb5.KRB_ERR_GENERIC);
        ke.initCause(ioe);
        throw ke;
    }
}
 

import sun.security.krb5.internal.Krb5; //导入依赖的package包/类
public static void main(String[] args)
        throws Exception {

    new OneKDC(null);

    if (args[0].equals("dfl")) {
        // Store file in scratch directory
        args[0] = "dfl:" + System.getProperty("user.dir") + File.separator;
        System.setProperty("sun.security.krb5.rcache", args[0]);
    }

    Context c, s;
    c = Context.fromUserPass(OneKDC.USER, OneKDC.PASS, false);
    s = Context.fromUserKtab(OneKDC.SERVER, OneKDC.KTAB, true);

    c.startAsClient(OneKDC.SERVER, GSSUtil.GSS_KRB5_MECH_OID);
    s.startAsServer(GSSUtil.GSS_KRB5_MECH_OID);

    byte[] first = c.take(new byte[0]);
    c.take(s.take(first));

    s.startAsServer(GSSUtil.GSS_KRB5_MECH_OID);
    try {
        s.take(first);  // Replay the last apreq sent
        throw new Exception("This method should fail");
    } catch (GSSException gsse) {
        gsse.printStackTrace();
        KrbException ke = (KrbException)gsse.getCause();
        if (ke.returnCode() != Krb5.KRB_AP_ERR_REPEAT) {
            throw gsse;
        }
    }
}