Examples of EncKrbPrivPart

org.apache.directory.server.kerberos.shared.messages.components.EncKrbPrivPart
Encrypted part of private messages. @author Apache Directory Project @version $Rev: 589780 $, $Date: 2007-10-29 19:14:59 +0100 (Lun, 29 oct 2007) $

org.apache.directory.shared.kerberos.components.EncKrbPrivPart

The EncKrbPrivPart structure is used to store a EncKrbPrivPart associated to a type. The ASN.1 grammar is :

 EncKrbPrivPart  ::= [APPLICATION 28] SEQUENCE { user-data       [0] OCTET STRING, timestamp       [1] KerberosTime OPTIONAL, usec            [2] Microseconds OPTIONAL, seq-number      [3] UInt32 OPTIONAL, s-address       [4] HostAddress -- sender's addr --, r-address       [5] HostAddress OPTIONAL -- recip's addr }

@author Apache Directory Project

Examples of org.apache.directory.server.kerberos.shared.messages.components.EncKrbPrivPart

        EncryptionKey subSessionKey = authenticator.getSubSessionKey();


        // decrypt the request's private message with the subsession key
        EncryptedData encReqPrivPart = request.getPrivateMessage().getEncryptedPart();


        EncKrbPrivPart privatePart;


        try
        {
            privatePart = ( EncKrbPrivPart ) cipherTextHandler.unseal( EncKrbPrivPart.class, subSessionKey,
                encReqPrivPart, KeyUsage.NUMBER13 );
        }
        catch ( KerberosException ke )
        {
            throw new ChangePasswordException( ErrorType.KRB5_KPASSWD_SOFTERROR, ke );
        }


        ChangePasswordData passwordData = null;


        if ( request.getVersionNumber() == ( short ) 1 )
        {
            // Use protocol version 0x0001, the legacy Kerberos change password protocol
            ChangePasswordDataModifier modifier = new ChangePasswordDataModifier();
            modifier.setNewPassword( privatePart.getUserData() );
            passwordData = modifier.getChangePasswdData();
        }
        else
        {
            // Use protocol version 0xFF80, the backwards-compatible MS protocol
            ChangePasswordDataDecoder passwordDecoder = new ChangePasswordDataDecoder();
            passwordData = passwordDecoder.decodeChangePasswordData( privatePart.getUserData() );
        }


        try
        {
            changepwContext.setPassword( new String( passwordData.getPassword(), "UTF-8" ) );

View Full Code Here

Examples of org.apache.directory.server.kerberos.shared.messages.components.EncKrbPrivPart

        byte[] resultCode =
            { ( byte ) 0x00, ( byte ) 0x00 };
        modifier.setUserData( resultCode );


        modifier.setSenderAddress( new HostAddress( InetAddress.getLocalHost() ) );
        EncKrbPrivPart privPart = modifier.getEncKrbPrivPart();


        // get the subsession key from the Authenticator
        EncryptionKey subSessionKey = authenticator.getSubSessionKey();


        EncryptedData encPrivPart;

View Full Code Here

Examples of org.apache.directory.server.kerberos.shared.messages.components.EncKrbPrivPart

    {
        // Make private message part.
        EncKrbPrivPartModifier privPartModifier = new EncKrbPrivPartModifier();
        privPartModifier.setUserData( newPassword.getBytes( "UTF-8" ) );
        privPartModifier.setSenderAddress( new HostAddress( InetAddress.getLocalHost() ) );
        EncKrbPrivPart encReqPrivPart = privPartModifier.getEncKrbPrivPart();


        // Seal private message part.
        EncryptedData encryptedPrivPart = cipherTextHandler.seal( subSessionKey, encReqPrivPart, KeyUsage.NUMBER13 );


        // Make private message with private message part.

View Full Code Here

Examples of org.apache.directory.server.kerberos.shared.messages.components.EncKrbPrivPart

        byte[] dataBytes = encoder.encode( data );


        privPartModifier.setUserData( dataBytes );


        privPartModifier.setSenderAddress( new HostAddress( InetAddress.getLocalHost() ) );
        EncKrbPrivPart encReqPrivPart = privPartModifier.getEncKrbPrivPart();


        // Seal private message part.
        EncryptedData encryptedPrivPart = cipherTextHandler.seal( subSessionKey, encReqPrivPart, KeyUsage.NUMBER13 );


        // Make private message with private message part.

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.EncKrbPrivPart

        ChangePasswdData passwordData = null;
        
        try
        {
            byte[] decryptedData = cipherTextHandler.decrypt( subSessionKey, encReqPrivPart, KeyUsage.KRB_PRIV_ENC_PART_CHOSEN_KEY );
            EncKrbPrivPart privatePart = KerberosDecoder.decodeEncKrbPrivPart( decryptedData );


            if( authenticator.getSeqNumber() != privatePart.getSeqNumber() )
            {
                throw new ChangePasswordException( ChangePasswdErrorType.KRB5_KPASSWD_MALFORMED );    
            }
            
            if ( request.getVersionNumber() == AbstractPasswordMessage.OLD_PVNO )
            {
                passwordData = new ChangePasswdData();
                passwordData.setNewPasswd( privatePart.getUserData() );
            }
            else
            {
                Asn1Decoder passwordDecoder = new Asn1Decoder();
                ByteBuffer stream = ByteBuffer.wrap( privatePart.getUserData() );
                ChangePasswdDataContainer container = new ChangePasswdDataContainer( stream );
                passwordDecoder.decode( stream, container );
                passwordData = container.getChngPwdData();
            }
        }

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.EncKrbPrivPart


        // begin building reply


        // create priv message
        // user-data component is short result code
        EncKrbPrivPart privPart = new EncKrbPrivPart();
        // first two bytes are the result code, rest is the string 'Password Changed' followed by a null char
        byte[] resultCode =
            { ( byte ) 0x00, ( byte ) 0x00, (byte)0x50, (byte)0x61, (byte)0x73, (byte)0x73, (byte)0x77, (byte)0x6F, (byte)0x72, (byte)0x64, (byte)0x20, (byte)0x63, (byte)0x68, (byte)0x61, (byte)0x6E, (byte)0x67, (byte)0x65, (byte)0x64, (byte)0x00 };
        privPart.setUserData( resultCode );


        privPart.setSenderAddress( new HostAddress( InetAddress.getLocalHost() ) );


        // get the subsession key from the Authenticator
        EncryptionKey subSessionKey = authenticator.getSubKey();


        EncryptedData encPrivPart;

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.EncKrbPrivPart

        catch ( DecoderException e )
        {
            fail();
        }


        EncKrbPrivPart encKrbPrivPart = container.getEncKrbPrivPart();


        String time = "20101119080043Z";
        HostAddress ad = new HostAddress( InetAddress.getByName( "127.0.0.1" ) );


        assertTrue( Arrays.equals( new byte[]
            { 0, 1 }, encKrbPrivPart.getUserData() ) );
        assertEquals( time, encKrbPrivPart.getTimestamp().getDate() );
        assertEquals( 1, encKrbPrivPart.getUsec() );
        assertEquals( 1, encKrbPrivPart.getSeqNumber() );
        assertEquals( ad, encKrbPrivPart.getSenderAddress() );
        assertEquals( ad, encKrbPrivPart.getRecipientAddress() );


        int computedLen = encKrbPrivPart.computeLength();


        assertEquals( streamLen, computedLen );


        try
        {
            ByteBuffer bb = ByteBuffer.allocate( computedLen );


            encKrbPrivPart.encode( bb );


            String encoded = Strings.dumpBytes( bb.array() );
            assertEquals( decoded, encoded );
        }
        catch ( EncoderException e )

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.EncKrbPrivPart

        {
            throw new KerberosException( ErrorType.KRB_AP_ERR_BAD_INTEGRITY, de );
        }


        // get the decoded EncKrbPrivPart
        EncKrbPrivPart encKrbPrivPart = ( ( EncKrbPrivPartContainer ) encKrbPrivPartContainer ).getEncKrbPrivPart();


        return encKrbPrivPart;
    }

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.EncKrbPrivPart


        ApRep apRep = chngPwdReply.getApplicationReply();
        
        KrbPriv krbPriv = chngPwdReply.getPrivateMessage();
        byte[] decryptedKrbPrivPart = cipherTextHandler.decrypt( subSessionKey, krbPriv.getEncPart(), KeyUsage.KRB_PRIV_ENC_PART_CHOSEN_KEY );
        EncKrbPrivPart krbPrivPart = KerberosDecoder.decodeEncKrbPrivPart( decryptedKrbPrivPart );
        System.out.println( krbPrivPart );
    }

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.EncKrbPrivPart

            apReq.setAuthenticator( authData );
            
            
            KrbPriv privateMessage = new KrbPriv();
            
            EncKrbPrivPart part = new EncKrbPrivPart();
            part.setSenderAddress( new HostAddress( InetAddress.getLocalHost() ) );
            part.setSeqNumber( authenticator.getSeqNumber() );
            part.setTimestamp( authenticator.getCtime() );


            short changePwdPVNO = ChangePasswordRequest.PVNO;
            
            if( config.isUseLegacyChngPwdProtocol() )
            {
                part.setUserData( Strings.getBytesUtf8( newPassword ) );
                changePwdPVNO = ChangePasswordRequest.OLD_PVNO;
            }
            else
            {
                ChangePasswdData chngPwdData = new ChangePasswdData();
                chngPwdData.setNewPasswd( Strings.getBytesUtf8( newPassword ) );
                //chngPwdData.setTargName( new PrincipalName( clientPrincipal, PrincipalNameType.KRB_NT_PRINCIPAL ) );
                //chngPwdData.setTargRealm( clientTgtReq.getRealm() );
                byte[] data = getEncoded( chngPwdData );
                part.setUserData( data );
            }
            
            EncryptedData encKrbPrivPartData = cipherTextHandler.encrypt( subKey, getEncoded( part ), KeyUsage.KRB_PRIV_ENC_PART_CHOSEN_KEY );
            privateMessage.setEncPart( encKrbPrivPartData );
            
            ChangePasswordRequest req = new ChangePasswordRequest( changePwdPVNO, apReq, privateMessage );
            
            channel = new KerberosChannel();
            channel.openConnection( config.getHostName(), config.getPasswdPort(), config.getTimeout(), config.isUseUdp() );
            
            AbstractPasswordMessage reply = sendAndReceiveChngPwdMsg( req, channel );
            
            if ( reply instanceof ChangePasswordError )
            {
                ChangePasswordError err = ( ChangePasswordError ) reply;
                
                ChangePasswordResult result = new ChangePasswordResult( err.getKrbError().getEData() );


                return result;
            }
            
            ChangePasswordReply chngPwdReply = ( ChangePasswordReply ) reply;


            KrbPriv replyPriv = chngPwdReply.getPrivateMessage();
            // the same subKey present in ApReq is used for encrypting the KrbPriv present in reply
            byte[] data = cipherTextHandler.decrypt( subKey, replyPriv.getEncPart(), KeyUsage.KRB_PRIV_ENC_PART_CHOSEN_KEY );
            part = KerberosDecoder.decodeEncKrbPrivPart( data );
            
            ChangePasswordResult result = new ChangePasswordResult( part.getUserData() );
            
            return result;
        }
        catch( ChangePasswordException e )
        {

View Full Code Here

0 1 2 3

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.