Package org.keycloak.common.util

Class KerberosJdkProvider

java.lang.Object

org.keycloak.common.util.KerberosJdkProvider

public abstract class KerberosJdkProvider
extends Object

Provides abstraction to handle differences between various JDK vendors (Sun, IBM)

Author:

Marek Posolda

Constructor Summary

Constructors

Constructor	Description
KerberosJdkProvider()

Method Summary

Modifier and Type	Method	Description
abstract Configuration	createJaasConfigurationForServer(String keytab, String serverPrincipal, boolean debug)
abstract Configuration	createJaasConfigurationForUsernamePasswordLogin(boolean debug)
static KerberosJdkProvider	getProvider()
abstract KerberosTicket	gssCredentialToKerberosTicket(KerberosTicket kerberosTicket, GSSCredential gssCredential)
boolean	isKerberosAvailable()
GSSCredential	kerberosTicketToGSSCredential(KerberosTicket kerberosTicket)
GSSCredential	kerberosTicketToGSSCredential(KerberosTicket kerberosTicket, int lifetime, int usage)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KerberosJdkProvider

public KerberosJdkProvider()

Method Detail

createJaasConfigurationForServer

public abstract Configuration createJaasConfigurationForServer(String keytab,
                                                               String serverPrincipal,
                                                               boolean debug)

createJaasConfigurationForUsernamePasswordLogin

public abstract Configuration createJaasConfigurationForUsernamePasswordLogin(boolean debug)

gssCredentialToKerberosTicket

public abstract KerberosTicket gssCredentialToKerberosTicket(KerberosTicket kerberosTicket,
                                                             GSSCredential gssCredential)

kerberosTicketToGSSCredential

public GSSCredential kerberosTicketToGSSCredential(KerberosTicket kerberosTicket)

isKerberosAvailable

public boolean isKerberosAvailable()

Returns:

true if Kerberos (GSS API) is available in underlying JDK and it is possible to use it. False otherwise

kerberosTicketToGSSCredential

public GSSCredential kerberosTicketToGSSCredential(KerberosTicket kerberosTicket,
                                                   int lifetime,
                                                   int usage)

getProvider

public static KerberosJdkProvider getProvider()