- All Implemented Interfaces:
- org.apache.kerby.asn1.Asn1Dumpable, org.apache.kerby.asn1.type.Asn1Type
public class ADIntendedForServer
extends AuthorizationDataEntry
Asn1 Class for the "intended for server" authorization type.
RFC 4120
AD-INTENDED-FOR-SERVER SEQUENCE { intended-server[0] SEQUENCE OF
PrincipalName elements[1] AuthorizationData }
AD elements encapsulated within the intended-for-server element may be
ignored if the application server is not in the list of principal names of
intended servers. Further, a KDC issuing a ticket for an application server
can remove this element if the application server is not in the list of
intended servers.
Application servers should check for their principal name in the
intended-server field of this element. If their principal name is not found,
this element should be ignored. If found, then the encapsulated elements
should be evaluated in the same manner as if they were present in the top
level authorization data field. Applications and application servers that do
not implement this element should reject tickets that contain authorization
data elements of this type.
Contributed to the Apache Kerby Project by: Prodentity - Corrales, NM
- Author:
- Apache DirectoryProject