| Class | Description |
|---|---|
| AsRep |
AS-REP ::= [APPLICATION 11] KDC-REP
|
| AsReq |
AS-REQ ::= [APPLICATION 10] KDC-REQ
|
| EncAsRepPart |
EncASRepPart ::= [APPLICATION 25] EncKDCRepPart
|
| EncKdcRepPart |
EncKDCRepPart ::= SEQUENCE {
key [0] EncryptionKey,
last-req [1] LastReq,
nonce [2] UInt32,
key-expiration [3] KerberosTime OPTIONAL,
flags [4] TicketFlags,
authtime [5] KerberosTime,
starttime [6] KerberosTime OPTIONAL,
endtime [7] KerberosTime,
renew-till [8] KerberosTime OPTIONAL,
srealm [9] Realm,
sname [10] PrincipalName,
caddr [11] HostAddresses OPTIONAL
}
|
| EncTgsRepPart |
EncTGSRepPart ::= [APPLICATION 26] EncKDCRepPart
|
| KdcOptions | |
| KdcRep |
KDC-REP ::= SEQUENCE {
pvno [0] INTEGER (5),
msg-type [1] INTEGER (11 -- AS -- | 13 -- TGS --),
padata [2] SEQUENCE OF PA-DATA OPTIONAL
-- NOTE: not empty --,
crealm [3] Realm,
cname [4] PrincipalName,
ticket [5] Ticket,
enc-part [6] EncryptedData
-- EncASRepPart or EncTGSRepPart,
-- as appropriate
}
|
| KdcReq |
KDC-REQ ::= SEQUENCE {
-- NOTE: first tag is [1], not [0]
pvno [1] INTEGER (5) ,
msg-type [2] INTEGER (10 -- AS -- | 12 -- TGS --),
padata [3] SEQUENCE OF PA-DATA OPTIONAL
-- NOTE: not empty --,
req-encodeBody [4] KDC-REQ-BODY
}
|
| KdcReqBody |
KDC-REQ-BODY ::= SEQUENCE {
kdc-options [0] KDCOptions,
cname [1] PrincipalName OPTIONAL
-- Used only in AS-REQ --,
realm [2] Realm
-- Server's realm
-- Also client's in AS-REQ --,
sname [3] PrincipalName OPTIONAL,
from [4] KerberosTime OPTIONAL,
till [5] KerberosTime,
rtime [6] KerberosTime OPTIONAL,
nonce [7] UInt32,
etype [8] SEQUENCE OF Int32 -- EncryptionType
-- in preference order --,
addresses [9] HostAddresses OPTIONAL,
enc-authorization-data [10] EncryptedData OPTIONAL
-- AuthorizationData --,
additional-tickets [11] SEQUENCE OF Ticket OPTIONAL
-- NOTE: not empty
}
|
| TgsRep |
TGS-REP ::= [APPLICATION 13] KDC-REP
|
| TgsReq |
TGS-REQ ::= [APPLICATION 12] KDC-REQ
|
| Enum | Description |
|---|---|
| EncKdcRepPart.EncKdcRepPartField | |
| KdcOption | |
| KdcRep.KdcRepField | |
| KdcReq.KdcReqField | |
| KdcReqBody.KdcReqBodyField |
Copyright © 2014–2019 The Apache Software Foundation. All rights reserved.