grabbing session key from GSS-API

[Seema Malkani]

Check out the javadocs for javax.security.auth.kerberos.KerberosTicket class
http://java.sun.com/j2se/1.5.0/docs/api/index.html

If you have the appropriate permissions to access the private credentials,
you can extract the Kerberos credentials from JAAS subject, by iterating
through the returned set, and obtain the session key via
KerberosTicket.getSessionKey()

Hope this helps.
Seema

David Tsai wrote:

>Hi,
>
>I'm working on kerberizing a few java (v1.4.2) classes and am building utilizing JAAS/GSS-API to help me authenticate against a kerberos server.  If authentification is successful, I can get the ticket in a GSS wrapper by doing mySubject.getPrivateCredentials(), but I was wondering if there was a way to extract the ticket session key from the wrapper, hopefully in the form of a string or array.  Somebody told me vaguely to try "RFC", but I'm not sure exactly what he meant and also how I would implement that into my Java project.  It seems like there should be something within the GSS API that already lets me dig into and extract the session key from ticket wrapper, but I haven't been able to find it.
>
>Any help would be greatly appreciated.
>
>Thanks,
>David
>________________________________________________
>Kerberos mailing list           Kerberos at mit.edu
>https://mailman.mit.edu/mailman/listinfo/kerberos
>  
>