| Modifier and Type | Class and Description |
|---|---|
class |
EncKrbPrivPart
EncKrbPrivPart ::= [APPLICATION 28] SEQUENCE {
user-data[0] OCTET STRING,
timestamp[1] KerberosTime OPTIONAL,
usec[2] INTEGER OPTIONAL,
seq-number[3] INTEGER OPTIONAL,
s-address[4] HostAddress, -- sender's addr
r-address[5] HostAddress OPTIONAL
-- recip's addr
}
|
class |
KrbPriv
The KRB_PRIV message, as defined in RFC 1510 :
The KRB_PRIV message contains user data encrypted in the Session Key.
|
| Modifier and Type | Class and Description |
|---|---|
class |
ApRep
The AP-REP message, as defined in RFC 4120 :
|
class |
ApReq
The AP-REQ message, as defined in RFC 4120 :
|
class |
Authenticator
The definition of the unencrypted AUthenticator, per RFC 4120, section 5.5.1 :
|
class |
EncAPRepPart
The EncAPRepPart, as defined in RFC 4120, section 5.5.2
|
| Modifier and Type | Class and Description |
|---|---|
class |
KrbError
KRB-ERROR ::= [APPLICATION 30] SEQUENCE {
pvno [0] INTEGER (5),
msg-type [1] INTEGER (30),
ctime [2] KerberosTime OPTIONAL,
cusec [3] Microseconds OPTIONAL,
stime [4] KerberosTime,
susec [5] Microseconds,
error-code [6] Int32,
crealm [7] Realm OPTIONAL,
cname [8] PrincipalName OPTIONAL,
realm [9] Realm -- service realm --,
sname [10] PrincipalName -- service name --,
e-text [11] KerberosString OPTIONAL,
e-data [12] OCTET STRING OPTIONAL
}
|
class |
KrbMessage
A base class for every possible Kerberos messages :
AS-REQ : [APPLICATION 10]
AS-REP : [APPLICATION 11]
TGS-REQ : [APPLICATION 12]
TGS-REP : [APPLICATION 13]
AP-REQ : [APPLICATION 14]
AP-REP : [APPLICATION 15]
KRB-SAFE : [APPLICATION 20]
KRB-PRIV : [APPLICATION 21]
KRB-CRED : [APPLICATION 22]
KRB_ERROR : [APPLICATION 30]
|
| Modifier and Type | Class and Description |
|---|---|
class |
AsRep
AS-REP ::= [APPLICATION 11] KDC-REP
|
class |
AsReq
AS-REQ ::= [APPLICATION 10] KDC-REQ
|
class |
EncAsRepPart
EncASRepPart ::= [APPLICATION 25] EncKDCRepPart
|
class |
EncKdcRepPart
EncKDCRepPart ::= SEQUENCE {
key [0] EncryptionKey,
last-req [1] LastReq,
nonce [2] UInt32,
key-expiration [3] KerberosTime OPTIONAL,
flags [4] TicketFlags,
authtime [5] KerberosTime,
starttime [6] KerberosTime OPTIONAL,
endtime [7] KerberosTime,
renew-till [8] KerberosTime OPTIONAL,
srealm [9] Realm,
sname [10] PrincipalName,
caddr [11] HostAddresses OPTIONAL
}
|
class |
EncTgsRepPart
EncTGSRepPart ::= [APPLICATION 26] EncKDCRepPart
|
class |
KdcRep
KDC-REP ::= SEQUENCE {
pvno [0] INTEGER (5),
msg-type [1] INTEGER (11 -- AS -- | 13 -- TGS --),
padata [2] SEQUENCE OF PA-DATA OPTIONAL
-- NOTE: not empty --,
crealm [3] Realm,
cname [4] PrincipalName,
ticket [5] Ticket,
enc-part [6] EncryptedData
-- EncASRepPart or EncTGSRepPart,
-- as appropriate
}
|
class |
KdcReq
KDC-REQ ::= SEQUENCE {
-- NOTE: first tag is [1], not [0]
pvno [1] INTEGER (5) ,
msg-type [2] INTEGER (10 -- AS -- | 12 -- TGS --),
padata [3] SEQUENCE OF PA-DATA OPTIONAL
-- NOTE: not empty --,
req-encodeBody [4] KDC-REQ-BODY
}
|
class |
TgsRep
TGS-REP ::= [APPLICATION 13] KDC-REP
|
class |
TgsReq
TGS-REQ ::= [APPLICATION 12] KDC-REQ
|
| Modifier and Type | Class and Description |
|---|---|
class |
EncTicketPart
-- Encrypted part of ticket
EncTicketPart ::= [APPLICATION 3] SEQUENCE {
flags [0] TicketFlags,
key [1] EncryptionKey,
crealm [2] Realm,
cname [3] PrincipalName,
transited [4] TransitedEncoding,
authtime [5] KerberosTime,
starttime [6] KerberosTime OPTIONAL,
endtime [7] KerberosTime,
renew-till [8] KerberosTime OPTIONAL,
caddr [9] HostAddresses OPTIONAL,
authorization-data [10] AuthorizationData OPTIONAL
}
|
class |
Ticket
Ticket ::= [APPLICATION 1] SEQUENCE {
tkt-vno [0] INTEGER (5),
realm [1] Realm,
sname [2] PrincipalName,
enc-part [3] EncryptedData -- EncTicketPart
}
|
Copyright © 2014–2019 The Apache Software Foundation. All rights reserved.