Fwd: Re: Fwd: Re: inspecting krb5 ticket in GSSAPI

[Shawn M Emery]

-------- Original Message --------
Subject: 	Re: Fwd: Re: inspecting krb5 ticket in GSSAPI
Date: 	Wed, 10 Nov 2010 08:38:38 +0800
From: 	Weijun Wang <weijun.wang at oracle.com>
To: 	Shawn M Emery <shawn.emery at oracle.com>


This is only available in JDK 7. And, since not standardized by IETF,
still in com.sun.security.jgss package, will be supported even if it
goes inside org.ietf.jgss package

import org.ietf.jgss.GSSContext;
import com.sun.security.jgss.ExtendedGSSContext;
import com.sun.security.jgss.InquireType;

GSSContext x;

// createContext/initSecContext/acceptSecContext etc etc

if (x instanceof ExtendedGSSContext) {
     if (x.isEstablished()) {
         ExtendedGSSContext ex = (ExtendedGSSContext)x;
         boolean[] flags = (boolean[])ex.inquireSecContext(
                 InquireType.KRB5_GET_TKT_FLAGS);

Thanks
Max

On 11/10/2010 08:17 AM, Shawn M Emery wrote:
>
>
>  -------- Original Message --------
>  Subject: Re: inspecting krb5 ticket in GSSAPI
>  Date: Tue, 09 Nov 2010 14:21:38 -0800
>  From: Frank Cusack<frank+krb at linetwo.net>
>  To: Luke Howard<lukeh at padl.com>
>  CC: krbdev at mit.edu
>
>
>
>  On 11/10/10 8:29 AM +1100 Luke Howard wrote:
>>
>>  On 10/11/2010, at 6:50 AM, Frank Cusack wrote:
>>
>>>  If I want my GSSAPI server application to inspect the kerberos
>>>  ticket flags, is there a way to do this?
>>
>>  gss_krb5_get_tkt_flags()
>
>  Any Java solution?
>  _______________________________________________
>  krbdev mailing list krbdev at mit.edu
>  https://mailman.mit.edu/mailman/listinfo/krbdev
>