Back to index...

	/*
	* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
	*
	* This code is free software; you can redistribute it and/or modify it
	* under the terms of the GNU General Public License version 2 only, as
	* published by the Free Software Foundation. Oracle designates this
	* particular file as subject to the "Classpath" exception as provided
	* by Oracle in the LICENSE file that accompanied this code.
	*
	* This code is distributed in the hope that it will be useful, but WITHOUT
	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
	* version 2 for more details (a copy is included in the LICENSE file that
	* accompanied this code).
	*
	* You should have received a copy of the GNU General Public License version
	* 2 along with this work; if not, write to the Free Software Foundation,
	* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
	*
	* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
	* or visit www.oracle.com if you need additional information or have any
	* questions.
	*/

	/*
	*
	* (C) Copyright IBM Corp. 1999 All Rights Reserved.
	* Copyright 1997 The Open Group Research Institute. All rights reserved.
	*/

	package sun.security.krb5.internal;

	import sun.security.krb5.Asn1Exception;
	import sun.security.krb5.internal.util.KerberosFlags;
	import sun.security.util.*;
	import java.io.IOException;

	/**
	* Implements the ASN.1TicketFlags type.
	*
	* TicketFlags ::= BIT STRING
	* {
	* reserved(0),
	* forwardable(1),
	* forwarded(2),
	* proxiable(3),
	* proxy(4),
	* may-postdate(5),
	* postdated(6),
	* invalid(7),
	* renewable(8),
	* initial(9),
	* pre-authent(10),
	* hw-authent(11),
	* enc-pa-rep(15)
	* }
	*/
	public class TicketFlags extends KerberosFlags {
	public TicketFlags() {
	super(Krb5.TKT_OPTS_MAX + 1);
	}

	public TicketFlags (boolean[] flags) throws Asn1Exception {
	super(flags);
	if (flags.length > Krb5.TKT_OPTS_MAX + 1) {
	throw new Asn1Exception(Krb5.BITSTRING_BAD_LENGTH);
	}
	}

	public TicketFlags(int size, byte[] data) throws Asn1Exception {
	super(size, data);
	if ((size > data.length * BITS_PER_UNIT) \|\| (size > Krb5.TKT_OPTS_MAX + 1))
	throw new Asn1Exception(Krb5.BITSTRING_BAD_LENGTH);
	}

	public TicketFlags(DerValue encoding) throws IOException, Asn1Exception {
	this(encoding.getUnalignedBitString(true).toBooleanArray());
	}

	/**
	* Parse (unmarshal) a ticket flag from a DER input stream. This form
	* parsing might be used when expanding a value which is part of
	* a constructed sequence and uses explicitly tagged type.
	*
	* @exception Asn1Exception on error.
	* @param data the Der input stream value, which contains one or more marshaled value.
	* @param explicitTag tag number.
	* @param optional indicate if this data field is optional
	* @return an instance of TicketFlags.
	*
	*/
	public static TicketFlags parse(DerInputStream data, byte explicitTag, boolean optional) throws Asn1Exception, IOException {
	if ((optional) && (((byte)data.peekByte() & (byte)0x1F) != explicitTag))
	return null;
	DerValue der = data.getDerValue();
	if (explicitTag != (der.getTag() & (byte)0x1F)) {
	throw new Asn1Exception(Krb5.ASN1_BAD_ID);
	}
	else {
	DerValue subDer = der.getData().getDerValue();
	return new TicketFlags(subDer);
	}
	}

	public Object clone() {
	try {
	return new TicketFlags(this.toBooleanArray());
	}
	catch (Exception e) {
	return null;
	}
	}

	public boolean match(LoginOptions options) {
	boolean matched = false;
	//We currently only consider if forwardable renewable and proxiable are match
	if (this.get(Krb5.TKT_OPTS_FORWARDABLE) == (options.get(KDCOptions.FORWARDABLE))) {
	if (this.get(Krb5.TKT_OPTS_PROXIABLE) == (options.get(KDCOptions.PROXIABLE))) {
	if (this.get(Krb5.TKT_OPTS_RENEWABLE) == (options.get(KDCOptions.RENEWABLE))) {
	matched = true;
	}
	}
	}
	return matched;
	}
	public boolean match(TicketFlags flags) {
	boolean matched = true;
	for (int i = 0; i <= Krb5.TKT_OPTS_MAX; i++) {
	if (this.get(i) != flags.get(i)) {
	return false;
	}
	}
	return matched;
	}


	/**
	* Returns the string representative of ticket flags.
	*/
	public String toString() {
	StringBuffer sb = new StringBuffer();
	boolean[] flags = toBooleanArray();
	for (int i = 0; i < flags.length; i++) {
	if (flags[i] == true) {
	switch (i) {
	case 0:
	sb.append("RESERVED;");
	break;
	case 1:
	sb.append("FORWARDABLE;");
	break;
	case 2:
	sb.append("FORWARDED;");
	break;
	case 3:
	sb.append("PROXIABLE;");
	break;
	case 4:
	sb.append("PROXY;");
	break;
	case 5:
	sb.append("MAY-POSTDATE;");
	break;
	case 6:
	sb.append("POSTDATED;");
	break;
	case 7:
	sb.append("INVALID;");
	break;
	case 8:
	sb.append("RENEWABLE;");
	break;
	case 9:
	sb.append("INITIAL;");
	break;
	case 10:
	sb.append("PRE-AUTHENT;");
	break;
	case 11:
	sb.append("HW-AUTHENT;");
	break;
	case 15:
	sb.append("ENC-PA-REP;");
	break;
	}
	}
	}
	String result = sb.toString();
	if (result.length() > 0) {
	result = result.substring(0, result.length() - 1);
	}
	return result;
	}
	}

Back to index...