Serializable
, Guard
public final class DelegationPermission extends BasicPermission implements Serializable
The target name of this Permission
specifies a pair of kerberos service principals. The first is the subordinate service principal being entrusted to use the TGT. The second service principal designates the target service the subordinate service principal is to interact with on behalf of the initiating KerberosPrincipal. This latter service principal is specified to restrict the use of a proxiable ticket.
For example, to specify the "host" service use of a forwardable TGT the target permission is specified as follows:
DelegationPermission("\"host/[email protected]\" \"krbtgt/[email protected]\"");
To give the "backup" service a proxiable nfs service ticket the target permission might be specified:
DelegationPermission("\"backup/[email protected]\" \"nfs/[email protected]\"");
Constructor | Description |
---|---|
DelegationPermission |
Create a new DelegationPermission with the specified subordinate and target principals. |
DelegationPermission |
Create a new DelegationPermission with the specified subordinate and target principals. |
Modifier and Type | Method | Description |
---|---|---|
boolean |
equals |
Checks two DelegationPermission objects for equality. |
int |
hashCode() |
Returns the hash code value for this object. |
boolean |
implies |
Checks if this Kerberos delegation permission object "implies" the specified permission. |
PermissionCollection |
newPermissionCollection() |
Returns a PermissionCollection object for storing DelegationPermission objects. |
getActions
checkGuard, getName, toString
public DelegationPermission(String principals)
DelegationPermission
with the specified subordinate and target principals.principals
- the name of the subordinate and target principalsNullPointerException
- if principals
is null
.IllegalArgumentException
- if principals
is empty, or does not contain a pair of principals, or is improperly quotedpublic DelegationPermission(String principals, String actions)
DelegationPermission
with the specified subordinate and target principals.principals
- the name of the subordinate and target principalsactions
- should be null.NullPointerException
- if principals
is null
.IllegalArgumentException
- if principals
is empty, or does not contain a pair of principals, or is improperly quotedpublic boolean implies(Permission p)
This method returns true if this DelegationPermission
is equal to p
, and returns false otherwise.
implies
in class BasicPermission
p
- the permission to check against.public boolean equals(Object obj)
equals
in class BasicPermission
obj
- the object to test for equality with this object.obj
is a DelegationPermission, and has the same subordinate and service principal as this DelegationPermission object.public int hashCode()
hashCode
in class BasicPermission
public PermissionCollection newPermissionCollection()
newPermissionCollection
in class BasicPermission
© 1993, 2023, Oracle and/or its affiliates. All rights reserved.
Documentation extracted from Debian's OpenJDK Development Kit package.
Licensed under the GNU General Public License, version 2, with the Classpath Exception.
Various third party code in OpenJDK is licensed under different licenses (see Debian package).
Java and OpenJDK are trademarks or registered trademarks of Oracle and/or its affiliates.
https://docs.oracle.com/en/java/javase/21/docs/api/java.security.jgss/javax/security/auth/kerberos/DelegationPermission.html