org.apache.kerby.kerberos.kerb.client

Class KrbConfig

java.lang.Object

org.apache.kerby.config.Conf

org.apache.kerby.kerberos.kerb.common.Krb5Conf

org.apache.kerby.kerberos.kerb.client.KrbConfig

All Implemented Interfaces:

Config

public class KrbConfig
extends Krb5Conf

Kerb client side configuration API.

Constructor Summary

Constructors

Constructor and Description
KrbConfig()

Method Summary

Modifier and Type	Method and Description
boolean	allowTcp() Is to allow TCP for KDC
boolean	allowUdp() Is to allow UDP for KDC
boolean	enableDebug()
long	getAllowableClockSkew() Get allowable clock skew.
boolean	getAllowWeakCrypto() Get whether allow weak crypto.
LinkedList<String>	getCapath(String sourceRealm, String destRealm) Get capath of specified realms.
String	getDefaultRealm() Get default realm.
List<EncryptionType>	getDefaultTgsEnctypes() Get default tgs encryption types.
List<EncryptionType>	getDefaultTktEnctypes() Get default ticket encryption types.
boolean	getDnsLookUpKdc() Get whether dns look up kdc.
boolean	getDnsLookUpRealm() Get whether dns look up realm.
List<EncryptionType>	getEncryptionTypes() Get encryption types.
String	getKdcHost() Get KDC host name
int	getKdcPort() Get KDC port, as both TCP and UDP ports
String	getKdcRealm() Get KDC realm.
int	getKdcTcpPort() Get KDC TCP port
int	getKdcUdpPort() Get KDC UDP port
long	getMaximumRenewableLifetime() Get maximum renewable life time.
long	getMaximumTicketLifetime() Get maximum ticket life time.
long	getMinimumTicketLifetime() Get minimum ticket life time.
List<String>	getPkinitAnchors()
List<String>	getPkinitIdentities()
String	getPkinitKdcHostName()
Map<String,Object>	getRealmSection(String realm)
List<Object>	getRealmSectionItems(String realm, String key)
String	getRenewLifetime() Get renew life time.
String	getTgsPrincipal() Get tgs principal.
String	getTicketLifetime() Get ticket life time.
boolean	isBodyChecksumVerified() Get whether body checksum verified.
boolean	isEmptyAddressesAllowed() Get whether empty addresses allowed.
boolean	isForwardableAllowed() Get whether forward is allowed.
boolean	isPaEncTimestampRequired() Get whether pa encrypt timestamp required.
boolean	isPostdatedAllowed() Get whether post dated is allowed.
boolean	isPreauthRequired() Get whether preauth is required.
boolean	isProxiableAllowed() Get whether proxy is allowed.
boolean	isRenewableAllowed() Get whether renew is allowed.

Methods inherited from class org.apache.kerby.kerberos.kerb.common.Krb5Conf

addKrb5Config, getBoolean, getEncryptionTypes, getEncryptionTypes, getEncTypes, getInt, getLong, getSection, getString, getStringArray

Methods inherited from class org.apache.kerby.config.Conf

addIniConfig, addJsonConfig, addMapConfig, addPropertiesConfig, addPropertiesConfig, addResource, addXmlConfig, getBoolean, getBoolean, getBoolean, getClass, getClass, getClass, getConfig, getConfig, getFloat, getFloat, getFloat, getInstance, getInstance, getInstance, getInt, getInt, getInt, getList, getList, getList, getLong, getLong, getLong, getNames, getResource, getString, getString, getString, getTrimmed, getTrimmed, reload, setBoolean, setBoolean, setFloat, setFloat, setInt, setInt, setLong, setLong, setString, setString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KrbConfig

public KrbConfig()

Method Detail

enableDebug

public boolean enableDebug()

getKdcHost

public String getKdcHost()

Get KDC host name

Returns:

The kdc host

getKdcPort

public int getKdcPort()

Get KDC port, as both TCP and UDP ports

Returns:

The kdc host

getKdcTcpPort

public int getKdcTcpPort()

Get KDC TCP port

Returns:

The kdc tcp port

allowUdp

public boolean allowUdp()

Is to allow UDP for KDC

Returns:

true to allow UDP, false otherwise

allowTcp

public boolean allowTcp()

Is to allow TCP for KDC

Returns:

true to allow TCP, false otherwise

getKdcUdpPort

public int getKdcUdpPort()

Get KDC UDP port

Returns:

The kdc udp port

getKdcRealm

public String getKdcRealm()

Get KDC realm.

Returns:

The kdc realm

isPreauthRequired

public boolean isPreauthRequired()

Get whether preauth is required.

Returns:

true if preauth required

getTgsPrincipal

public String getTgsPrincipal()

Get tgs principal.

Returns:

The tgs principal

getAllowableClockSkew

public long getAllowableClockSkew()

Get allowable clock skew.

Returns:

The allowable clock skew

isEmptyAddressesAllowed

public boolean isEmptyAddressesAllowed()

Get whether empty addresses allowed.

Returns:

true if empty address is allowed

isForwardableAllowed

public boolean isForwardableAllowed()

Get whether forward is allowed.

Returns:

true if forward is allowed

isPostdatedAllowed

public boolean isPostdatedAllowed()

Get whether post dated is allowed.

Returns:

true if post dated is allowed

isProxiableAllowed

public boolean isProxiableAllowed()

Get whether proxy is allowed.

Returns:

true if proxy is allowed

isRenewableAllowed

public boolean isRenewableAllowed()

Get whether renew is allowed.

Returns:

true if renew is allowed

getMaximumRenewableLifetime

public long getMaximumRenewableLifetime()

Get maximum renewable life time.

Returns:

The maximum renewable life time

getMaximumTicketLifetime

public long getMaximumTicketLifetime()

Get maximum ticket life time.

Returns:

The maximum ticket life time

getMinimumTicketLifetime

public long getMinimumTicketLifetime()

Get minimum ticket life time.

Returns:

The minimum ticket life time

getEncryptionTypes

public List<EncryptionType> getEncryptionTypes()

Get encryption types.

Returns:

encryption type list

isPaEncTimestampRequired

public boolean isPaEncTimestampRequired()

Get whether pa encrypt timestamp required.

Returns:

true if pa encrypt time required

isBodyChecksumVerified

public boolean isBodyChecksumVerified()

Get whether body checksum verified.

Returns:

true if body checksum verified

getDefaultRealm

public String getDefaultRealm()

Get default realm.

Returns:

The default realm

getDnsLookUpKdc

public boolean getDnsLookUpKdc()

Get whether dns look up kdc.

Returns:

true if dnc look up kdc

getDnsLookUpRealm

public boolean getDnsLookUpRealm()

Get whether dns look up realm.

Returns:

true if dns look up realm

getAllowWeakCrypto

public boolean getAllowWeakCrypto()

Get whether allow weak crypto.

Returns:

true if allow weak crypto

getTicketLifetime

public String getTicketLifetime()

Get ticket life time.

Returns:

The ticket life time

getRenewLifetime

public String getRenewLifetime()

Get renew life time.

Returns:

The renew life time

getDefaultTgsEnctypes

public List<EncryptionType> getDefaultTgsEnctypes()

Get default tgs encryption types.

Returns:

The tgs encryption type list

getDefaultTktEnctypes

public List<EncryptionType> getDefaultTktEnctypes()

Get default ticket encryption types.

Returns:

The encryption type list

getPkinitAnchors

public List<String> getPkinitAnchors()

getPkinitIdentities

public List<String> getPkinitIdentities()

getPkinitKdcHostName

public String getPkinitKdcHostName()

getRealmSectionItems

public List<Object> getRealmSectionItems(String realm,
                                         String key)

getRealmSection

public Map<String,Object> getRealmSection(String realm)

getCapath

public LinkedList<String> getCapath(String sourceRealm,
                                    String destRealm)
                             throws KrbException

Get capath of specified realms.

Parameters:

sourceRealm - source realm

destRealm - dest realm

Returns:

The capath from sourceRealm to destRealm

Throws:

KrbException