Java KeyTab.isBound方法代码示例

import javax.security.auth.kerberos.KeyTab; //导入方法依赖的package包/类
@Override
public boolean isRelated(Subject subject, Principal princ) {
    if (princ == null) return false;
    Set<Principal> principals =
            subject.getPrincipals(Principal.class);
    if (principals.contains(princ)) {
        // bound to this principal
        return true;
    }
    for (KeyTab pc: subject.getPrivateCredentials(KeyTab.class)) {
        if (!pc.isBound()) {
            return true;
        }
    }
    return false;
}
 

import javax.security.auth.kerberos.KeyTab; //导入方法依赖的package包/类
@Override
public boolean isRelated(boolean isClient,
        AccessControlContext acc, Principal p) {

    if (p == null) return false;
    try {
        Subject subject = AccessController.doPrivileged(
                (PrivilegedExceptionAction<Subject>)
                        () -> Krb5Util.getSubject(
                                isClient ? GSSCaller.CALLER_SSL_CLIENT
                                        : GSSCaller.CALLER_SSL_SERVER,
                                acc));
        if (subject == null) {
            if (debug != null && Debug.isOn("session")) {
                System.out.println("Kerberos credentials are" +
                        " not present in the current Subject;" +
                        " check if " +
                        " javax.security.auth.useSubjectAsCreds" +
                        " system property has been set to false");
            }
            return false;
        }
        Set<Principal> principals =
                subject.getPrincipals(Principal.class);
        if (principals.contains(p)) {
            // bound to this principal
            return true;
        } else {
            if (isClient) {
                return false;
            } else {
                for (KeyTab pc : subject.getPrivateCredentials(KeyTab.class)) {
                    if (!pc.isBound()) {
                        return true;
                    }
                }
                return false;
            }
        }
    } catch (PrivilegedActionException pae) {
        if (debug != null && Debug.isOn("session")) {
            System.out.println("Attempt to obtain" +
                    " subject failed! " + pae);
        }
        return false;
    }

}
 

import javax.security.auth.kerberos.KeyTab; //导入方法依赖的package包/类
/**
 * Creates a ServiceCreds object based on info in a Subject for
 * a given principal name (if specified).
 * @return the object, or null if there is no private creds for it
 */
public static ServiceCreds getInstance(
        Subject subj, String serverPrincipal) {

    ServiceCreds sc = new ServiceCreds();

    sc.allPrincs =
            subj.getPrincipals(KerberosPrincipal.class);

    // Compatibility. A key implies its own principal
    for (KerberosKey key: SubjectComber.findMany(
            subj, serverPrincipal, null, KerberosKey.class)) {
        sc.allPrincs.add(key.getPrincipal());
    }

    if (serverPrincipal != null) {      // A named principal
        sc.kp = new KerberosPrincipal(serverPrincipal);
    } else {
        // For compatibility reason, we set the name of default principal
        // to the "only possible" name it can take, which means there is
        // only one KerberosPrincipal and there is no unbound keytabs
        if (sc.allPrincs.size() == 1) {
            boolean hasUnbound = false;
            for (KeyTab ktab: SubjectComber.findMany(
                    subj, null, null, KeyTab.class)) {
                if (!ktab.isBound()) {
                    hasUnbound = true;
                    break;
                }
            }
            if (!hasUnbound) {
                sc.kp = sc.allPrincs.iterator().next();
                serverPrincipal = sc.kp.getName();
            }
        }
    }

    sc.ktabs = SubjectComber.findMany(
                subj, serverPrincipal, null, KeyTab.class);
    sc.kk = SubjectComber.findMany(
                subj, serverPrincipal, null, KerberosKey.class);
    sc.tgt = SubjectComber.find(
            subj, null, serverPrincipal, KerberosTicket.class);
    if (sc.ktabs.isEmpty() && sc.kk.isEmpty() && sc.tgt == null) {
        return null;
    }

    sc.destroyed = false;

    return sc;
}