/*
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation. Oracle designates this
* particular file as subject to the "Classpath" exception as provided
* by Oracle in the LICENSE file that accompanied this code.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/*
*
* (C) Copyright IBM Corp. 1999 All Rights Reserved.
* Copyright 1997 The Open Group Research Institute. All rights reserved.
*/
// Constants and other defined values from RFC 4120
public class Krb5 {
//Recommended KDC values
public static final boolean DEFAULT_FORWARDABLE_ALLOWED = true;
public static final boolean DEFAULT_PROXIABLE_ALLOWED = true;
public static final boolean DEFAULT_POSTDATE_ALLOWED = true;
public static final boolean DEFAULT_RENEWABLE_ALLOWED = true;
public static final boolean AP_EMPTY_ADDRESSES_ALLOWED = true;
//AP_REQ Options
//Ticket Flags
// KDC Options
// (option values defined in KDCOptions.java)
// KerberosFlags
//Last Request types
//Host address lengths
//Host address types
//IP Transport UDP Port for KDC Messages
// number of retries before giving up
//OSI authentication mechanism OID
//public static final int[] OSI_AUTH_MECH_TYPE = { /*iso*/ 1, /*org*/ 3,
// /*dod*/ 5, /*internet*/ 1, /*security*/ 5, /*kerberosv5*/ 2 };
//Protocol constants and associated values
//Key Types
//----------------------------------------+-----------------
// padata type |padata-type value
//----------------------------------------+-----------------
// new preauth types
//-------------------------------+-------------
//authorization data type |ad-type value
//-------------------------------+-------------
//reserved values 0-63
//----------------------------------------------+-----------------
//alternate authentication type |method-type value
//----------------------------------------------+-----------------
// reserved values 0-63
//--------------------------------------------+-------------
//transited encoding type |tr-type value
//--------------------------------------------+-------------
// reserved values all others
//----------------------------+-------+-----------------------------------------
// Label |Value |Meaning
//----------------------------+-------+-----------------------------------------
//message types
// there are several message sub-components not included here
//message component types
//error codes
// public static final int KRB_AP_ERR_CKSUM_NOKEY =101; //Lack of the key to generate the checksum
// error codes specific to this implementation
public static final int BITSTRING_SIZE_INVALID = 500; //BitString size does not match input byte array
public static final int BITSTRING_INDEX_OUT_OF_BOUNDS = 501; //BitString bit index does not fall within size
public static final int BITSTRING_BAD_LENGTH = 502; //BitString length is wrong for the expected type
public static final int REALM_ILLCHAR = 600; //Illegal character in realm name; one of: '/', ':', '\0'
return errMsgList.get(i);
}
public static final boolean DEBUG =
static {
errMsgList.put(KRB_AP_ERR_NOREALM, "Realm name not available"); //used in setDefaultCreds() in sun.security.krb5.Credentials
// error messages specific to this implementation
}
}