org.keycloak.common.util.KerberosJdkProvider.IBMJDKProvider クラス

org.keycloak.common.util.KerberosJdkProvider.IBMJDKProvider の継承関係図

org.keycloak.common.util.KerberosJdkProvider.IBMJDKProvider 連携図

公開メンバ関数
Configuration	createJaasConfigurationForServer (String keytab, final String serverPrincipal, final boolean debug)
Configuration	createJaasConfigurationForUsernamePasswordLogin (final boolean debug)
KerberosTicket	gssCredentialToKerberosTicket (KerberosTicket kerberosTicket, GSSCredential gssCredential)
GSSCredential	kerberosTicketToGSSCredential (KerberosTicket kerberosTicket)
GSSCredential	kerberosTicketToGSSCredential (KerberosTicket kerberosTicket, final int lifetime, final int usage)

静的公開メンバ関数
static KerberosJdkProvider	getProvider ()

非公開メンバ関数
String	getKeytabURL (String keytab)

詳解

関数詳解

createJaasConfigurationForServer()

Configuration org.keycloak.common.util.KerberosJdkProvider.IBMJDKProvider.createJaasConfigurationForServer ( String  keytab, final String  serverPrincipal, final boolean  debug  )

inline

                                                                                                                                {
            final String keytabUrl = getKeytabURL(keytab);

            return new Configuration() {

                @Override
                public AppConfigurationEntry[] getAppConfigurationEntry(String name) {
                    Map<String, Object> options = new HashMap<>();
                    options.put("noAddress", "true");
                    options.put("credsType","acceptor");
                    options.put("useKeytab", keytabUrl);
                    options.put("principal", serverPrincipal);
                    options.put("debug", String.valueOf(debug));

                    AppConfigurationEntry kerberosLMConfiguration = new AppConfigurationEntry("com.ibm.security.auth.module.Krb5LoginModule", AppConfigurationEntry.LoginModuleControlFlag.REQUIRED, options);
                    return new AppConfigurationEntry[] { kerberosLMConfiguration };
                }
            };
        }

createJaasConfigurationForUsernamePasswordLogin()

Configuration org.keycloak.common.util.KerberosJdkProvider.IBMJDKProvider.createJaasConfigurationForUsernamePasswordLogin ( final boolean  debug )

inline

                                                                                                  {
            return new Configuration() {

                @Override
                public AppConfigurationEntry[] getAppConfigurationEntry(String name) {
                    Map<String, Object> options = new HashMap<>();
                    options.put("credsType","initiator");
                    options.put("noAddress", "true");
                    options.put("debug", String.valueOf(debug));
                    AppConfigurationEntry kerberosLMConfiguration = new AppConfigurationEntry("com.ibm.security.auth.module.Krb5LoginModule", AppConfigurationEntry.LoginModuleControlFlag.REQUIRED, options);
                    return new AppConfigurationEntry[] { kerberosLMConfiguration };
                }
            };
        }

getKeytabURL()

String org.keycloak.common.util.KerberosJdkProvider.IBMJDKProvider.getKeytabURL ( String  keytab )

inlineprivate

                                                   {
            try {
                return new File(keytab).toURI().toURL().toString();
            } catch (MalformedURLException mfe) {
                System.err.println("Invalid keytab location specified in configuration: " + keytab);
                mfe.printStackTrace();
                return keytab;
            }
        }

getProvider()

static KerberosJdkProvider org.keycloak.common.util.KerberosJdkProvider.getProvider ( )

inlinestaticinherited

                                                    {
        if (Environment.IS_IBM_JAVA) {
            return new IBMJDKProvider();
        } else {
            return new SunJDKProvider();
        }
    }

gssCredentialToKerberosTicket()

KerberosTicket org.keycloak.common.util.KerberosJdkProvider.IBMJDKProvider.gssCredentialToKerberosTicket ( KerberosTicket  kerberosTicket, GSSCredential  gssCredential  )

inline

                                                                                                                        {
            if (kerberosTicket == null) {
                throw new KerberosSerializationUtils.KerberosSerializationException("Not available kerberosTicket in subject credentials in IBM JDK");
            } else {
                return kerberosTicket;
            }
        }

kerberosTicketToGSSCredential() [1/2]

GSSCredential org.keycloak.common.util.KerberosJdkProvider.kerberosTicketToGSSCredential ( KerberosTicket  kerberosTicket )

inlineinherited

                                                                                      {
        return kerberosTicketToGSSCredential(kerberosTicket, GSSCredential.DEFAULT_LIFETIME, GSSCredential.INITIATE_ONLY);
    }

kerberosTicketToGSSCredential() [2/2]

GSSCredential org.keycloak.common.util.KerberosJdkProvider.kerberosTicketToGSSCredential ( KerberosTicket  kerberosTicket, final int  lifetime, final int  usage  )

inlineinherited

                                                                                                                           {
        try {
            final GSSManager gssManager = GSSManager.getInstance();

            KerberosPrincipal kerberosPrincipal = kerberosTicket.getClient();
            String krbPrincipalName = kerberosTicket.getClient().getName();
            final GSSName gssName = gssManager.createName(krbPrincipalName, KerberosConstants.KRB5_NAME_OID);

            Set<KerberosPrincipal> principals = Collections.singleton(kerberosPrincipal);
            Set<GSSName> publicCreds = Collections.singleton(gssName);
            Set<KerberosTicket> privateCreds = Collections.singleton(kerberosTicket);
            Subject subject = new Subject(false, principals, publicCreds, privateCreds);

            return Subject.doAs(subject, new PrivilegedExceptionAction<GSSCredential>() {

                @Override
                public GSSCredential run() throws Exception {
                    return gssManager.createCredential(gssName, lifetime, KerberosConstants.KRB5_OID, usage);
                }

            });
        } catch (Exception e) {
            throw new KerberosSerializationUtils.KerberosSerializationException("Unexpected exception during convert KerberosTicket to GSSCredential", e);
        }
    }

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/src/keycloak/src/main/java/org/keycloak/common/util/KerberosJdkProvider.java