org.apache.ws.security.kerberos

Class KrbTicketDecoder

java.lang.Object

org.apache.ws.security.kerberos.KrbTicketDecoder

public class KrbTicketDecoder
extends java.lang.Object

Kerberos Ticket Decoder provides the ability to decode a Kerberos v5 service ticket, so the session key and client principal name can be accessed. Reference : http://thejavamonkey.blogspot.com/2008/05/how-to-decrypt-kerberos-gss-ap-req.html

Constructor Summary

Constructors

Constructor and Description
KrbTicketDecoder(byte[] serviceTicket, javax.security.auth.Subject subject) Construct a Kerberos Ticket Decoder.

Method Summary

Modifier and Type	Method and Description
javax.crypto.SecretKey	getSessionKey() Get the session key from the decoded service ticket.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KrbTicketDecoder

public KrbTicketDecoder(byte[] serviceTicket,
                        javax.security.auth.Subject subject)

Construct a Kerberos Ticket Decoder. This takes the service ticket that is to be decoded and the JAAS subject that contains the secret key for the target service.

Parameters:

serviceTicket - the AP-REQ service ticket that is to be decode

subject - the JAAS subject containing the secret key for the server principal

Method Detail

getSessionKey

public javax.crypto.SecretKey getSessionKey()
                                     throws java.lang.Exception

Get the session key from the decoded service ticket.

Returns:

the session key

Throws:

java.lang.Exception