You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by er...@apache.org on 2007/08/02 11:04:34 UTC
svn commit: r562051 -
/directory/apacheds/trunk/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/kdc/ticketgrant/ConfigureTicketGrantingChain.java
Author: erodriguez
Date: Thu Aug 2 02:04:33 2007
New Revision: 562051
URL: http://svn.apache.org/viewvc?view=rev&rev=562051
Log:
Modified the TGS to set the replay cache entry expiration to the configured clockskew.
Modified:
directory/apacheds/trunk/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/kdc/ticketgrant/ConfigureTicketGrantingChain.java
Modified: directory/apacheds/trunk/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/kdc/ticketgrant/ConfigureTicketGrantingChain.java
URL: http://svn.apache.org/viewvc/directory/apacheds/trunk/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/kdc/ticketgrant/ConfigureTicketGrantingChain.java?view=diff&rev=562051&r1=562050&r2=562051
==============================================================================
--- directory/apacheds/trunk/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/kdc/ticketgrant/ConfigureTicketGrantingChain.java (original)
+++ directory/apacheds/trunk/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/kdc/ticketgrant/ConfigureTicketGrantingChain.java Thu Aug 2 02:04:33 2007
@@ -20,11 +20,11 @@
package org.apache.directory.server.kerberos.kdc.ticketgrant;
+import org.apache.directory.server.kerberos.kdc.KdcConfiguration;
import org.apache.directory.server.kerberos.shared.crypto.encryption.CipherTextHandler;
import org.apache.directory.server.kerberos.shared.exceptions.ErrorType;
import org.apache.directory.server.kerberos.shared.exceptions.KerberosException;
import org.apache.directory.server.kerberos.shared.replay.InMemoryReplayCache;
-import org.apache.directory.server.kerberos.shared.replay.ReplayCache;
import org.apache.mina.common.IoSession;
import org.apache.mina.handler.chain.IoHandlerCommand;
@@ -35,7 +35,7 @@
*/
public class ConfigureTicketGrantingChain implements IoHandlerCommand
{
- private static final ReplayCache replayCache = new InMemoryReplayCache();
+ private static final InMemoryReplayCache replayCache = new InMemoryReplayCache();
private static final CipherTextHandler cipherTextHandler = new CipherTextHandler();
private String contextKey = "context";
@@ -45,7 +45,11 @@
{
TicketGrantingContext tgsContext = ( TicketGrantingContext ) session.getAttribute( getContextKey() );
+ KdcConfiguration config = tgsContext.getConfig();
+ long clockSkew = config.getAllowableClockSkew();
+ replayCache.setClockSkew( clockSkew );
tgsContext.setReplayCache( replayCache );
+
tgsContext.setCipherTextHandler( cipherTextHandler );
if ( tgsContext.getRequest().getProtocolVersionNumber() != 5 )