Path: blob/master/src/java.security.jgss/share/classes/javax/security/auth/kerberos/package-info.java
41161 views
/*1* Copyright (c) 2001, 2018, Oracle and/or its affiliates. All rights reserved.2* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.3*4* This code is free software; you can redistribute it and/or modify it5* under the terms of the GNU General Public License version 2 only, as6* published by the Free Software Foundation. Oracle designates this7* particular file as subject to the "Classpath" exception as provided8* by Oracle in the LICENSE file that accompanied this code.9*10* This code is distributed in the hope that it will be useful, but WITHOUT11* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or12* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License13* version 2 for more details (a copy is included in the LICENSE file that14* accompanied this code).15*16* You should have received a copy of the GNU General Public License version17* 2 along with this work; if not, write to the Free Software Foundation,18* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.19*20* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA21* or visit www.oracle.com if you need additional information or have any22* questions.23*/2425/**26* This package contains utility classes related to the Kerberos network27* authentication protocol. They do not provide much Kerberos support28* themselves.<p>29*30* The Kerberos network authentication protocol is defined in31* <a href=http://www.ietf.org/rfc/rfc4120.txt>RFC 4120</a>. The Java32* platform contains support for the client side of Kerberos via the33* {@link org.ietf.jgss} package. There might also be34* a login module that implements35* {@link javax.security.auth.spi.LoginModule LoginModule} to authenticate36* Kerberos principals.<p>37*38* You can provide the name of your default realm and Key Distribution39* Center (KDC) host for that realm using the system properties40* {@systemProperty java.security.krb5.realm} and41* {@systemProperty java.security.krb5.kdc}. Both properties must be set.42* Alternatively, the {@systemProperty java.security.krb5.conf} system property43* can be set to the location of an MIT style {@code krb5.conf} configuration44* file. If none of these system properties are set, the {@code krb5.conf}45* file is searched for in an implementation-specific manner. Typically,46* an implementation will first look for a {@code krb5.conf} file in47* {@code <java-home>/conf/security} and failing that, in an OS-specific48* location.<p>49*50* The {@code krb5.conf} file is formatted in the Windows INI file style,51* which contains a series of relations grouped into different sections.52* Each relation contains a key and a value, the value can be an arbitrary53* string or a boolean value. A boolean value can be one of "true", "false",54* "yes", or "no", and values are case-insensitive.55*56* @since 1.457*/58package javax.security.auth.kerberos;596061