com.mindbright.ssh2

Class SSH2AuthGSS

java.lang.Object

com.mindbright.ssh2.SSH2AuthGSS

All Implemented Interfaces:

SSH2AuthModule, java.security.PrivilegedAction<SSH2TransportPDU>

public class SSH2AuthGSS
extends java.lang.Object
implements SSH2AuthModule, java.security.PrivilegedAction<SSH2TransportPDU>

This class implements a module for GSS API user authentication as defined in RFC 4462. It only works with cached tickets. See also: http://java.sun.com/j2se/1.4.2/docs/guide/security/jgss/single-signon.html Depends on java properties: java.security.krb5.conf java.security.krb5.realm java.security.krb5.kdc

See Also:

SSH2AuthModule

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	STANDARD_NAME

Constructor Summary

Constructors

Constructor and Description
SSH2AuthGSS()
SSH2AuthGSS(java.lang.String realm, java.lang.String kdc)

Method Summary

Methods

Modifier and Type	Method and Description
void	clearSensitiveData() Clean up any sensitive data in this authentication module.
java.lang.String	getStandardName() Should give the standard name of this module as used in the userauth protocol.
SSH2TransportPDU	processMethodMessage(SSH2UserAuth userAuth, SSH2TransportPDU pdu) Processes the given method specific packet and returns a new packet which will be sent to peer to continue the authentication.
boolean	retryPointless() Returns true if there is not any point in trying this method again after it has failed once.
SSH2TransportPDU	run()
SSH2TransportPDU	startAuthentication(SSH2UserAuth userAuth) Starts the execution of this module, called from the given SSH2UserAuth.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

STANDARD_NAME

public static final java.lang.String STANDARD_NAME

See Also:

Constant Field Values

Constructor Detail

SSH2AuthGSS

public SSH2AuthGSS()

SSH2AuthGSS

public SSH2AuthGSS(java.lang.String realm,
           java.lang.String kdc)

Method Detail

getStandardName

public java.lang.String getStandardName()

Description copied from interface: SSH2AuthModule

Should give the standard name of this module as used in the userauth protocol.

Specified by:

getStandardName in interface SSH2AuthModule

Returns:

the standard name of the module

run

public SSH2TransportPDU run()

Specified by:

run in interface java.security.PrivilegedAction<SSH2TransportPDU>

processMethodMessage

public SSH2TransportPDU processMethodMessage(SSH2UserAuth userAuth,
                                    SSH2TransportPDU pdu)
                                      throws SSH2Exception

Description copied from interface: SSH2AuthModule

Processes the given method specific packet and returns a new packet which will be sent to peer to continue the authentication.

Specified by:

processMethodMessage in interface SSH2AuthModule

Parameters:

userAuth - the authentication layer responsible

pdu - the method specific packet

Returns:

the new packet to send to peer, or null if no packet should be sent.

Throws:

SSH2Exception - if an error occurs

startAuthentication

public SSH2TransportPDU startAuthentication(SSH2UserAuth userAuth)
                                     throws SSH2Exception

Description copied from interface: SSH2AuthModule

Starts the execution of this module, called from the given SSH2UserAuth.

Specified by:

startAuthentication in interface SSH2AuthModule

Parameters:

userAuth - the authentication layer responsible

Returns:

the packet which starts this authentication method (i.e. when sent to peer)

Throws:

SSH2Exception - if an error occurs

clearSensitiveData

public void clearSensitiveData()

Description copied from interface: SSH2AuthModule

Clean up any sensitive data in this authentication module. This should be called once the authentication is done.

Specified by:

clearSensitiveData in interface SSH2AuthModule

retryPointless

public boolean retryPointless()

Description copied from interface: SSH2AuthModule

Returns true if there is not any point in trying this method again after it has failed once.

Specified by:

retryPointless in interface SSH2AuthModule