Examples of PaEncTsEnc

org.apache.directory.shared.kerberos.components.PaEncTsEnc
The PaEncTsEnc structure is used to store a PA-ENC-TS-ENC associated to a type. The ASN.1 grammar is :
```
 PA-ENC-TS-ENC           ::= SEQUENCE { patimestamp     [0] KerberosTime -- client's time --, pausec          [1] Microseconds OPTIONAL } 
```
@author Apache Directory Project

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc

    private PaData[] getPreAuthPublicKey( KerberosPrincipal clientPrincipal, String passPhrase,
        KerberosTime timeStamp ) throws Exception
    {
        PaData[] paData = new PaData[1];


        PaEncTsEnc encryptedTimeStamp = new PaEncTsEnc( timeStamp, 0 );


        EncryptionKey clientKey = getEncryptionKey( clientPrincipal, passPhrase );


        EncryptedData encryptedData = lockBox.seal( clientKey, encryptedTimeStamp,
            KeyUsage.AS_REQ_PA_ENC_TIMESTAMP_WITH_CKEY );

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc

    protected PaData[] getPreAuthEncryptedTimeStamp( EncryptionKey clientKey, KerberosTime timeStamp )
        throws Exception
    {
        PaData[] paData = new PaData[1];


        PaEncTsEnc encryptedTimeStamp = new PaEncTsEnc( timeStamp, 0 );


        EncryptedData encryptedData = lockBox.seal( clientKey, encryptedTimeStamp, KeyUsage.AS_REQ_PA_ENC_TIMESTAMP_WITH_CKEY );


        ByteBuffer buffer = ByteBuffer.allocate( encryptedData.computeLength() );
        byte[] encodedEncryptedData = encryptedData.encode( buffer ).array();

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc

        {
            throw new KerberosException( ErrorType.KRB_AP_ERR_BAD_INTEGRITY, de );
        }


        // get the decoded PaEncTsEnc
        PaEncTsEnc paEncTsEnc = ( ( PaEncTsEncContainer ) paEncTsEncContainer ).getPaEncTsEnc();


        return paEncTsEnc;
    }

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc

        AsReq req = new AsReq();
        req.setKdcReqBody( body );


        if ( clientTgtReq.isPreAuthEnabled() )
        {
            PaEncTsEnc tmstmp = new PaEncTsEnc();
            tmstmp.setPaTimestamp( new KerberosTime() );
            
            EncryptedData paDataValue = cipherTextHandler.encrypt( clientKey, getEncoded( tmstmp ), KeyUsage.AS_REQ_PA_ENC_TIMESTAMP_WITH_CKEY );
            
            PaData paEncTstmp = new PaData();
            paEncTstmp.setPaDataType( PaDataType.PA_ENC_TIMESTAMP );

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc

    protected PaData[] getPreAuthEncryptedTimeStamp( KerberosPrincipal clientPrincipal,
        String passPhrase, KerberosTime timeStamp ) throws Exception
    {
        PaData[] paData = new PaData[1];


        PaEncTsEnc encryptedTimeStamp = new PaEncTsEnc( timeStamp, 0 );


        EncryptionKey clientKey = getEncryptionKey( clientPrincipal, passPhrase );


        EncryptedData encryptedData = lockBox.seal( clientKey, encryptedTimeStamp,
            KeyUsage.AS_REQ_PA_ENC_TIMESTAMP_WITH_CKEY );

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc

                    LOG_KRB.debug( "PRE_AUTH required..." );
                    throw new KerberosException( ErrorType.KDC_ERR_PREAUTH_REQUIRED,
                        preparePreAuthenticationError( authContext.getEncryptionType(), config.getEncryptionTypes() ) );
                }


                PaEncTsEnc timestamp = null;


                for ( PaData paData : preAuthData )
                {
                    if ( paData.getPaDataType().equals( PaDataType.PA_ENC_TIMESTAMP ) )
                    {
                        EncryptedData dataValue = KerberosDecoder.decodeEncryptedData( paData.getPaDataValue() );
                        byte[] decryptedData = cipherTextHandler.decrypt( clientKey, dataValue,
                            KeyUsage.AS_REQ_PA_ENC_TIMESTAMP_WITH_CKEY );
                        timestamp = KerberosDecoder.decodePaEncTsEnc( decryptedData );
                    }
                }


                if ( timestamp == null )
                {
                    LOG_KRB.error( "No timestamp found" );
                    throw new KerberosException( ErrorType.KDC_ERR_PREAUTH_REQUIRED,
                        preparePreAuthenticationError( authContext.getEncryptionType(), config.getEncryptionTypes() ) );
                }


                if ( !timestamp.getPaTimestamp().isInClockSkew( config.getAllowableClockSkew() ) )
                {
                    LOG_KRB.error( "Timestamp not in delay" );


                    throw new KerberosException( ErrorType.KDC_ERR_PREAUTH_FAILED );
                }

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc

        catch ( DecoderException de )
        {
            fail( de.getMessage() );
        }


        PaEncTsEnc paEncTsEnc = paEncTsEncContainer.getPaEncTsEnc();


        assertEquals( "20101010234545Z", paEncTsEnc.getPaTimestamp().toString() );
        assertEquals( 1, paEncTsEnc.getPausec() );


        ByteBuffer bb = ByteBuffer.allocate( paEncTsEnc.computeLength() );


        try
        {
            bb = paEncTsEnc.encode( bb );


            // Check the length
            assertEquals( 0x1A, bb.limit() );


            String encodedPdu = Strings.dumpBytes( bb.array() );

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc

        catch ( DecoderException de )
        {
            fail( de.getMessage() );
        }


        PaEncTsEnc paEncTsEnc = paEncTsEncContainer.getPaEncTsEnc();


        assertEquals( "20101010234545Z", paEncTsEnc.getPaTimestamp().toString() );
        assertEquals( -1, paEncTsEnc.getPausec() );


        ByteBuffer bb = ByteBuffer.allocate( paEncTsEnc.computeLength() );


        try
        {
            bb = paEncTsEnc.encode( bb );


            // Check the length
            assertEquals( 0x15, bb.limit() );


            String encodedPdu = Strings.dumpBytes( bb.array() );

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc


            // This will generate a PROTOCOL_ERROR
            throw new DecoderException( I18n.err( I18n.ERR_04067 ) );
        }


        PaEncTsEnc paEncTsEnc = new PaEncTsEnc();
        paEncTsEncContainer.setPaEncTsEnc( paEncTsEnc );


        if ( IS_DEBUG )
        {
            LOG.debug( "PaEncTsEnc created" );

View Full Code Here

Examples of org.apache.directory.shared.kerberos.components.PaEncTsEnc

        {
            throw new KerberosException( ErrorType.KRB_AP_ERR_BAD_INTEGRITY, de );
        }


        // get the decoded PaEncTsEnc
        PaEncTsEnc paEncTsEnc = ( ( PaEncTsEncContainer ) paEncTsEncContainer ).getPaEncTsEnc();


        return paEncTsEnc;
    }

View Full Code Here

0 1 2 3 4

TOP

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.