Java KeyTab.getInstance方法代码示例

import javax.security.auth.kerberos.KeyTab; //导入方法依赖的package包/类
@Test
public void testCheckTGTAfterLoginFromSubject() throws Exception {
  // security on, default is remove default realm
  SecurityUtil.setAuthenticationMethod(AuthenticationMethod.KERBEROS, conf);
  UserGroupInformation.setConfiguration(conf);

  // Login from a pre-set subject with a keytab
  final Subject subject = new Subject();
  KeyTab keytab = KeyTab.getInstance();
  subject.getPrivateCredentials().add(keytab);
  UserGroupInformation ugi = UserGroupInformation.getCurrentUser();
  ugi.doAs(new PrivilegedExceptionAction<Void>() {
    @Override
    public Void run() throws IOException {
      UserGroupInformation.loginUserFromSubject(subject);
      // this should not throw.
      UserGroupInformation.getLoginUser().checkTGTAndReloginFromKeytab();
      return null;
    }
  });

}
 

import javax.security.auth.kerberos.KeyTab; //导入方法依赖的package包/类
/**
 * Get a Ticket Granting Ticket (TGT) from Authentication Server (AS) with required keytab file.
 *
 * 1. Create and send AS-REQ
 * 2. Receive KRB ERROR (PRE-AUTH is mandatory in Kerberos v5)
 * 3. Re-send AS-REQ
 * 4. Receive AS-REP
 * 5. Return TGT credentials ticket in Java object
 *
 * @param keytabFileName Path file name to keytab (required already on disk storage, for instance
 *                       /etc/bob.keytab)
 * @param userName user name principal (UPN) (ex: [email protected])
 * @param realm Kerberos domain of the Authentication Server (ex: EXAMPLE.COM)
 * @return TGT credentials
 * @throws KrbException
 * @throws IOException
 *
 * Note: 
 * - For system administrator it is like the command: kinit -kt keytab upn 
 * - [WARNING] dependencies with internal proprietary API and may be removed in a future release
 */
public static Credentials getTGT(String keytabFileName, String userName, String realm)
    throws KrbException, IOException {

  KrbAsReqBuilder builder = null;
  try {

    PrincipalName userPrincipalName = new PrincipalName(userName);
    KeyTab keyTab = KeyTab.getInstance(new File(keytabFileName));
    builder = new KrbAsReqBuilder(userPrincipalName, keyTab);

    PrincipalName tgsPrincipalName = PrincipalName.tgsService(realm, realm);
    builder.setTarget(tgsPrincipalName);

    // see http://hg.openjdk.java.net/jdk8/jdk8/jdk/file/default/src/share/classes/sun/security/krb5/KdcComm.java#l145
    // for default parameters (timeout, max retries ...)
    builder.action();

    Credentials tgtCredentials = builder.getCCreds();
    if (DEBUG) {
      System.out.println(">>>TGT credentials : " +
          ReflectionToStringBuilder.toString(tgtCredentials));
    }
    return tgtCredentials;

  } finally {

    if (builder != null) {
      builder.destroy();
    }

  }

}
 

import javax.security.auth.kerberos.KeyTab; //导入方法依赖的package包/类
private static KeyTab oldktab() {
    return KeyTab.getInstance();
}
 

import javax.security.auth.kerberos.KeyTab; //导入方法依赖的package包/类
static KeyTab ktab(String s) {
    return KeyTab.getInstance(princ(s));
}