org.apache.ws.security.kerberos
Class KrbTicketDecoder

java.lang.Object
  org.apache.ws.security.kerberos.KrbTicketDecoder

public class KrbTicketDecoder
extends Object

Kerberos Ticket Decoder provides the ability to decode a Kerberos v5 service ticket, so the session key and client principal name can be accessed. Reference : http://thejavamonkey.blogspot.com/2008/05/how-to-decrypt-kerberos-gss-ap-req.html

Constructor Summary

KrbTicketDecoder(byte[] serviceTicket, Subject subject)
Construct a Kerberos Ticket Decoder.

Method Summary

SecretKey

getSessionKey() Get the session key from the decoded service ticket.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KrbTicketDecoder

public KrbTicketDecoder(byte[] serviceTicket,
                        Subject subject)

Construct a Kerberos Ticket Decoder. This takes the service ticket that is to be decoded and the JAAS subject that contains the secret key for the target service.

Parameters:

serviceTicket - the AP-REQ service ticket that is to be decode

subject - the JAAS subject containing the secret key for the server principal

Method Detail

getSessionKey

public SecretKey getSessionKey()
                        throws Exception

Get the session key from the decoded service ticket.

Returns:

the session key

Throws:

Exception