GSSCredential (Платформа Java SE 7)

Все Суперинтерфейсы:

Cloneable
```
public interface GSSCredential
extends Cloneable
```
Этот интерфейс инкапсулирует учетные данные GSS-API для объекта. Учетные данные содержат всю необходимую криптографическую информацию, чтобы включить созданию контекста от имени объекта, который это представляет. Это может содержать многократный, отличный, механизм определенные учетные элементы, каждый содержащий информацию для определенного механизма безопасности, но все обращение к тому же самому объекту. Учетные данные могут использоваться, чтобы выполнить инициирование контекста, принятие, или обоих.
Учетные данные инстанцируют, используя один из createCredential методы в GSSManager класс. Учетное создание GSS-API не предназначается, чтобы обеспечить "вход в систему для сетевой" функции, как таковой, функция включила бы создание новых учетных данных вместо того, чтобы просто получить дескриптор к существующим учетным данным. Раздел по учетному сбору в описании уровня пакета описывает, как существующие учетные данные получаются в платформе Java. Реализации GSS-API должны наложить локальную политику контроля доступа по вызывающим сторонам, чтобы препятствовать тому, чтобы несанкционированные вызывающие стороны получили учетные данные, на которые они не называются.
Приложения создадут учетную передачу объектов требуемые параметры. Приложение может тогда использовать методы запроса, чтобы получить определенную информацию об инстанцированном учетном объекте. Когда учетные данные больше не необходимы, приложение должно вызвать dispose метод, чтобы высвободить любые средства, сохраненные учетными данными, возражает и уничтожать любого криптографически уязвимая информация.
Этот пример кода демонстрирует создание реализации GSSCredential для определенного объекта, запросов его полей, и его выпуска, когда это больше не необходимо:
```
    GSSManager manager = GSSManager.getInstance();

    // start by creating a name object for the entity
    GSSName name = manager.createName("myusername", GSSName.NT_USER_NAME);

    // now acquire credentials for the entity
    GSSCredential cred = manager.createCredential(name,
                    GSSCredential.ACCEPT_ONLY);

    // display credential information - name, remaining lifetime,
    // and the mechanisms it has been acquired over
    System.out.println(cred.getName().toString());
    System.out.println(cred.getRemainingLifetime());

    Oid [] mechs = cred.getMechs();
    if (mechs != null) {
            for (int i = 0; i < mechs.length; i++)
                    System.out.println(mechs[i].toString());
    }

    // release system resources held by the credential
    cred.dispose();
 
```
Since:

1.4

See Also:
GSSManager.createCredential(int), GSSManager.createCredential(GSSName, int, Oid, int), GSSManager.createCredential(GSSName, int, Oid[], int), dispose()

Field Summary

Fields
Modifier and Type	Field and Description
`static int`	`ACCEPT_ONLY` Credential usage flag requesting that it be usable for context acceptance only.
`static int`	`DEFAULT_LIFETIME` A lifetime constant representing the default credential lifetime.
`static int`	`INDEFINITE_LIFETIME` A lifetime constant representing indefinite credential lifetime.
`static int`	`INITIATE_AND_ACCEPT` Credential usage flag requesting that it be usable for both context initiation and acceptance.
`static int`	`INITIATE_ONLY` Credential usage flag requesting that it be usable for context initiation only.

Method Summary

Methods
Modifier and Type	Method and Description
`void`	`add(GSSName name, int initLifetime, int acceptLifetime, Oid mech, int usage)` Adds a mechanism specific credential-element to an existing credential.
`void`	`dispose()` Releases any sensitive information that the GSSCredential object may be containing.
`boolean`	`equals(Object another)` Tests if this GSSCredential asserts the same entity as the supplied object.
`Oid[]`	`getMechs()` Returns a list of mechanisms supported by this credential.
`GSSName`	`getName()` Retrieves the name of the entity that the credential asserts.
`GSSName`	`getName(Oid mech)` Retrieves a Mechanism Name of the entity that the credential asserts.
`int`	`getRemainingAcceptLifetime(Oid mech)` Returns the lifetime in seconds for the credential to remain capable of accepting security contexts using the specified mechanism.
`int`	`getRemainingInitLifetime(Oid mech)` Returns the lifetime in seconds for the credential to remain capable of initiating security contexts using the specified mechanism.
`int`	`getRemainingLifetime()` Returns the remaining lifetime in seconds for a credential.
`int`	`getUsage()` Returns the credential usage mode.
`int`	`getUsage(Oid mech)` Returns the credential usage mode for a specific mechanism.
`int`	`hashCode()` Returns a hashcode value for this GSSCredential.

- Field Detail
  - INITIATE_AND_ACCEPT
```
static final int INITIATE_AND_ACCEPT
```
    Credential usage flag requesting that it be usable for both context initiation and acceptance.
    
    See Also:
    Constant Field Values
  - INITIATE_ONLY
```
static final int INITIATE_ONLY
```
    Credential usage flag requesting that it be usable for context initiation only.
    
    See Also:
    Constant Field Values
  - ACCEPT_ONLY
```
static final int ACCEPT_ONLY
```
    Credential usage flag requesting that it be usable for context acceptance only.
    
    See Also:
    Constant Field Values
  - DEFAULT_LIFETIME
```
static final int DEFAULT_LIFETIME
```
    A lifetime constant representing the default credential lifetime. This value it set to 0.
    
    See Also:
    Constant Field Values
  - INDEFINITE_LIFETIME
```
static final int INDEFINITE_LIFETIME
```
    A lifetime constant representing indefinite credential lifetime. This value must is set to the maximum integer value in Java - Integer.MAX_VALUE.
    
    See Also:
    Constant Field Values
- Method Detail
  - dispose
```
void dispose()
             throws GSSException
```
    Releases any sensitive information that the GSSCredential object may be containing. Applications should call this method as soon as the credential is no longer needed to minimize the time any sensitive information is maintained.
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.FAILURE
  - getName
```
GSSName getName()
                throws GSSException
```
    Retrieves the name of the entity that the credential asserts.
    
    Returns:
    a GSSName representing the entity
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.FAILURE
  - getName
```
GSSName getName(Oid mech)
                throws GSSException
```
    Retrieves a Mechanism Name of the entity that the credential asserts. This is equivalent to calling canonicalize on the value returned by the other form of getName.
    
    Parameters:
    mech - the Oid of the mechanism for which the Mechanism Name should be returned.
    
    Returns:
    a GSSName representing the entity canonicalized for the desired mechanism
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.BAD_MECH, GSSException.FAILURE
  - getRemainingLifetime
```
int getRemainingLifetime()
                         throws GSSException
```
    Returns the remaining lifetime in seconds for a credential. The remaining lifetime is the minimum lifetime amongst all of the underlying mechanism specific credential elements.
    
    Returns:
    the minimum remaining lifetime in seconds for this credential. A return value of INDEFINITE_LIFETIME indicates that the credential does not expire. A return value of 0 indicates that the credential is already expired.
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.FAILURE
    See Also:
    getRemainingInitLifetime(Oid), getRemainingAcceptLifetime(Oid)
  - getRemainingInitLifetime
```
int getRemainingInitLifetime(Oid mech)
                             throws GSSException
```
    Returns the lifetime in seconds for the credential to remain capable of initiating security contexts using the specified mechanism. This method queries the initiator credential element that belongs to the specified mechanism.
    
    Parameters:
    mech - the Oid of the mechanism whose intiator credential element should be queried.
    
    Returns:
    the number of seconds remaining in the life of this credential element. A return value of INDEFINITE_LIFETIME indicates that the credential element does not expire. A return value of 0 indicates that the credential element is already expired.
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.BAD_MECH, GSSException.FAILURE
  - getRemainingAcceptLifetime
```
int getRemainingAcceptLifetime(Oid mech)
                               throws GSSException
```
    Returns the lifetime in seconds for the credential to remain capable of accepting security contexts using the specified mechanism. This method queries the acceptor credential element that belongs to the specified mechanism.
    
    Parameters:
    mech - the Oid of the mechanism whose acceptor credential element should be queried.
    
    Returns:
    the number of seconds remaining in the life of this credential element. A return value of INDEFINITE_LIFETIME indicates that the credential element does not expire. A return value of 0 indicates that the credential element is already expired.
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.BAD_MECH, GSSException.FAILURE
  - getUsage
```
int getUsage()
             throws GSSException
```
    Returns the credential usage mode. In other words, it tells us if this credential can be used for initiating or accepting security contexts. It does not tell us which mechanism(s) has to be used in order to do so. It is expected that an application will allow the GSS-API to pick a default mechanism after calling this method.
    
    Returns:
    The return value will be one of INITIATE_ONLY, ACCEPT_ONLY, and INITIATE_AND_ACCEPT.
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.FAILURE
  - getUsage
```
int getUsage(Oid mech)
             throws GSSException
```
    Returns the credential usage mode for a specific mechanism. In other words, it tells us if this credential can be used for initiating or accepting security contexts with a given underlying mechanism.
    
    Parameters:
    mech - the Oid of the mechanism whose credentials usage mode is to be determined.
    
    Returns:
    The return value will be one of INITIATE_ONLY, ACCEPT_ONLY, and INITIATE_AND_ACCEPT.
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.BAD_MECH, GSSException.FAILURE
  - getMechs
```
Oid[] getMechs()
               throws GSSException
```
    Returns a list of mechanisms supported by this credential. It does not tell us which ones can be used to initiate contexts and which ones can be used to accept contexts. The application must call the getUsage method with each of the returned Oid's to determine the possible modes of usage.
    
    Returns:
    an array of Oid's corresponding to the supported mechanisms.
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.FAILURE
  - add
```
void add(GSSName name,
       int initLifetime,
       int acceptLifetime,
       Oid mech,
       int usage)
         throws GSSException
```
    Adds a mechanism specific credential-element to an existing credential. This method allows the construction of credentials, one mechanism at a time.
    This routine is envisioned to be used mainly by context acceptors during the creation of acceptor credentials which are to be used with a variety of clients using different security mechanisms.
    This routine adds the new credential element "in-place". To add the element in a new credential, first call clone to obtain a copy of this credential, then call its add method.
    As always, GSS-API implementations must impose a local access-control policy on callers to prevent unauthorized callers from acquiring credentials to which they are not entitled. Non-default values for initLifetime and acceptLifetime cannot always be honored by the underlying mechanisms, thus callers should be prepared to call getRemainingInitLifetime and getRemainingAcceptLifetime on the credential.
    
    Parameters:
    name - the name of the principal for whom this credential is to be acquired. Use null to specify the default principal.
    initLifetime - the number of seconds that the credential element should remain valid for initiating of security contexts. Use GSSCredential.INDEFINITE_LIFETIME to request that the credentials have the maximum permitted lifetime for this. Use GSSCredential.DEFAULT_LIFETIME to request default credential lifetime for this.
    acceptLifetime - the number of seconds that the credential element should remain valid for accepting security contexts. Use GSSCredential.INDEFINITE_LIFETIME to request that the credentials have the maximum permitted lifetime for this. Use GSSCredential.DEFAULT_LIFETIME to request default credential lifetime for this.
    mech - the mechanism over which the credential is to be acquired.
    usage - the usage mode that this credential element should add to the credential. The value of this parameter must be one of: INITIATE_AND_ACCEPT, ACCEPT_ONLY, and INITIATE_ONLY.
    
    Throws:
    
    GSSException - containing the following major error codes: GSSException.DUPLICATE_ELEMENT, GSSException.BAD_MECH, GSSException.BAD_NAMETYPE, GSSException.NO_CRED, GSSException.CREDENTIALS_EXPIRED, GSSException.FAILURE
  - equals
```
boolean equals(Object another)
```
    Tests if this GSSCredential asserts the same entity as the supplied object. The two credentials must be acquired over the same mechanisms and must refer to the same principal.
    
    Overrides:
    
    equals in class Object
    
    Parameters:
    another - another GSSCredential for comparison to this one
    
    Returns:
    true if the two GSSCredentials assert the same entity; false otherwise.
    See Also:
    Object.hashCode(), HashMap
  - hashCode
```
int hashCode()
```
    Returns a hashcode value for this GSSCredential.
    
    Overrides:
    
    hashCode in class Object
    
    Returns:
    a hashCode value
    See Also:
    Object.equals(java.lang.Object), System.identityHashCode(java.lang.Object)

Представьте ошибку или функцию
For further API reference and developer documentation, see Java SE Documentation. That documentation contains more detailed, developer-targeted descriptions, with conceptual overviews, definitions of terms, workarounds, and working code examples.
Copyright © 1993, 2011, Oracle and/or its affiliates. All rights reserved.

Интерфейсный GSSCredential

Field Summary

Method Summary

Field Detail

INITIATE_AND_ACCEPT

INITIATE_ONLY

ACCEPT_ONLY

DEFAULT_LIFETIME

INDEFINITE_LIFETIME

Method Detail

dispose

getName

getName

getRemainingLifetime

getRemainingInitLifetime

getRemainingAcceptLifetime

getUsage

getUsage

getMechs

add

equals

hashCode