使用 Spnego 解密 kerberos 票证 [英] Decrypt kerberos ticket using Spnego

问题描述

我在 JBoss 下使用 spnego(http://spnego.sourceforge.net)进行 kerberos 身份验证.

I'm using spnego ( http://spnego.sourceforge.net ) for kerberos authentication under JBoss.

我需要解密 kerberos 票证才能访问包含 PAC 数据的授权数据.需要 PAC 数据来决定将哪些角色授予用户.

I need to decrypt kerberos ticket to access the authorization-data which will containt PAC data. The PAC data is needed to decide which roles are to be granted to user.

如何访问和解密 kerberos 票证?我在网上搜索过例子，但没有努力.

How to access and decrypt kerberos ticket? I've searched net for examples, but without effort.

推荐答案

这些家伙有完整的 PAC 解码实现:

These guys have a full PAC decoding implementation:

http://jaaslounge.sourceforge.net/

您可以像这样使用令牌解析器:

You can use the token parser like this:

HttpServletRequest request = (HttpServletRequest) req;
String header = request.getHeader("Authorization");
byte[] base64Token = header.substring(10).getBytes("UTF-8");
byte[] spnegoHeader = Base64.decode(base64Token);

SpnegoInitToken spnegoToken = new SpnegoInitToken(spnegoHeader);

如果您想解密底层 Kerberos 票证，您将需要跳过一些障碍.不确定你是否需要那个.

You're going to need to jump though some hoops if you want to decrypt the underlying Kerberos ticket. Not sure if you need that.

资助

这篇关于使用 Spnego 解密 kerberos 票证的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！