org.keycloak.common.util.KerberosJdkProvider クラス

org.keycloak.common.util.KerberosJdkProvider の継承関係図

org.keycloak.common.util.KerberosJdkProvider 連携図

クラス
class	IBMJDKProvider
class	SunJDKProvider

公開メンバ関数
abstract Configuration	createJaasConfigurationForServer (String keytab, String serverPrincipal, boolean debug)
abstract Configuration	createJaasConfigurationForUsernamePasswordLogin (boolean debug)
abstract KerberosTicket	gssCredentialToKerberosTicket (KerberosTicket kerberosTicket, GSSCredential gssCredential)
GSSCredential	kerberosTicketToGSSCredential (KerberosTicket kerberosTicket)
GSSCredential	kerberosTicketToGSSCredential (KerberosTicket kerberosTicket, final int lifetime, final int usage)

静的公開メンバ関数
static KerberosJdkProvider	getProvider ()

詳解

Provides abstraction to handle differences between various JDK vendors (Sun, IBM)

著者

Marek Posolda

関数詳解

createJaasConfigurationForServer()

abstract Configuration org.keycloak.common.util.KerberosJdkProvider.createJaasConfigurationForServer ( String  keytab, String  serverPrincipal, boolean  debug  )

abstract

createJaasConfigurationForUsernamePasswordLogin()

abstract Configuration org.keycloak.common.util.KerberosJdkProvider.createJaasConfigurationForUsernamePasswordLogin ( boolean  debug )

abstract

getProvider()

static KerberosJdkProvider org.keycloak.common.util.KerberosJdkProvider.getProvider ( )

inlinestatic

                                                    {
        if (Environment.IS_IBM_JAVA) {
            return new IBMJDKProvider();
        } else {
            return new SunJDKProvider();
        }
    }

gssCredentialToKerberosTicket()

abstract KerberosTicket org.keycloak.common.util.KerberosJdkProvider.gssCredentialToKerberosTicket ( KerberosTicket  kerberosTicket, GSSCredential  gssCredential  )

abstract

kerberosTicketToGSSCredential() [1/2]

GSSCredential org.keycloak.common.util.KerberosJdkProvider.kerberosTicketToGSSCredential ( KerberosTicket  kerberosTicket )

inline

                                                                                      {
        return kerberosTicketToGSSCredential(kerberosTicket, GSSCredential.DEFAULT_LIFETIME, GSSCredential.INITIATE_ONLY);
    }

kerberosTicketToGSSCredential() [2/2]

GSSCredential org.keycloak.common.util.KerberosJdkProvider.kerberosTicketToGSSCredential ( KerberosTicket  kerberosTicket, final int  lifetime, final int  usage  )

inline

                                                                                                                           {
        try {
            final GSSManager gssManager = GSSManager.getInstance();

            KerberosPrincipal kerberosPrincipal = kerberosTicket.getClient();
            String krbPrincipalName = kerberosTicket.getClient().getName();
            final GSSName gssName = gssManager.createName(krbPrincipalName, KerberosConstants.KRB5_NAME_OID);

            Set<KerberosPrincipal> principals = Collections.singleton(kerberosPrincipal);
            Set<GSSName> publicCreds = Collections.singleton(gssName);
            Set<KerberosTicket> privateCreds = Collections.singleton(kerberosTicket);
            Subject subject = new Subject(false, principals, publicCreds, privateCreds);

            return Subject.doAs(subject, new PrivilegedExceptionAction<GSSCredential>() {

                @Override
                public GSSCredential run() throws Exception {
                    return gssManager.createCredential(gssName, lifetime, KerberosConstants.KRB5_OID, usage);
                }

            });
        } catch (Exception e) {
            throw new KerberosSerializationUtils.KerberosSerializationException("Unexpected exception during convert KerberosTicket to GSSCredential", e);
        }
    }

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/src/keycloak/src/main/java/org/keycloak/common/util/KerberosJdkProvider.java