import sun.security.krb5.Credentials; //导入依赖的package包/类
public static KerberosTicket credsToTicket(Credentials serviceCreds) {
    EncryptionKey sessionKey =  serviceCreds.getSessionKey();
    return new KerberosTicket(
        serviceCreds.getEncoded(),
        new KerberosPrincipal(serviceCreds.getClient().getName()),
        new KerberosPrincipal(serviceCreds.getServer().getName(),
                            KerberosPrincipal.KRB_NT_SRV_INST),
        sessionKey.getBytes(),
        sessionKey.getEType(),
        serviceCreds.getFlags(),
        serviceCreds.getAuthTime(),
        serviceCreds.getStartTime(),
        serviceCreds.getEndTime(),
        serviceCreds.getRenewTill(),
        serviceCreds.getClientAddresses());
}
 

import sun.security.krb5.Credentials; //导入依赖的package包/类
private Credentials renewCredentials(Credentials creds)
{
    Credentials lcreds;
    try {
        if (!creds.isRenewable())
            throw new RefreshFailedException("This ticket" +
                            " is not renewable");
        if (System.currentTimeMillis() > cred.getRenewTill().getTime())
            throw new RefreshFailedException("This ticket is past "
                                         + "its last renewal time.");
        lcreds = creds.renew();
        if (debug)
            System.out.println("Renewed Kerberos Ticket");
    } catch (Exception e) {
        lcreds = null;
        if (debug)
            System.out.println("Ticket could not be renewed : "
                            + e.getMessage());
    }
    return lcreds;
}
 

import sun.security.krb5.Credentials; //导入依赖的package包/类
public static void main(String[] args) throws Exception {
    final PrincipalName pn = new PrincipalName("[email protected]");
    final String ccache = args[0];

    if (args.length == 1) {
        // Main process, write the ccache and launch sub process
        CredentialsCache cache = CredentialsCache.create(pn, ccache);
        cache.save();
        Proc p = Proc.create("EmptyCC").args(ccache, "readcc")
                .env("KRB5CCNAME", ccache).start();
        p.waitFor();
    } else {
        // Sub process, read the ccache
        String cc = System.getenv("KRB5CCNAME");
        if (!cc.equals(ccache)) {
            throw new Exception("env not set correctly");
        }
        // 8001208: Fix for KRB5CCNAME not complete
        // Make sure the ccache is created with bare file name
        if (CredentialsCache.getInstance() == null) {
            throw new Exception("Cache not instantiated");
        }
        if (!new File("tmpcc").exists()) {
            throw new Exception("File not found");
        }
        Credentials.acquireTGTFromCache(pn, null);
    }
}
 

import sun.security.krb5.Credentials; //导入依赖的package包/类
private static boolean isOld(Credentials creds)
{
    Date endTime = creds.getEndTime();
    if (endTime != null) {
        Date authTime = creds.getAuthTime();
        long now = System.currentTimeMillis();
        if (authTime != null) {
            // pass the mid between auth and end
            return now - authTime.getTime() > endTime.getTime() - now;
        } else {
            // will expire in less than 2 hours
            return now <= endTime.getTime() - 1000*3600*2L;
        }
    }
    return false;
}
 

import sun.security.krb5.Credentials; //导入依赖的package包/类
private Credentials renewCredentials(Credentials creds)
{
    Credentials lcreds;
    try {
        if (!creds.isRenewable())
            throw new RefreshFailedException("This ticket" +
                            " is not renewable");
        if (creds.getRenewTill() == null) {
            // Renewable ticket without renew-till. Illegal and ignored.
            return creds;
        }
        if (System.currentTimeMillis() > cred.getRenewTill().getTime())
            throw new RefreshFailedException("This ticket is past "
                                         + "its last renewal time.");
        lcreds = creds.renew();
        if (debug)
            System.out.println("Renewed Kerberos Ticket");
    } catch (Exception e) {
        lcreds = null;
        if (debug)
            System.out.println("Ticket could not be renewed : "
                            + e.getMessage());
    }
    return lcreds;
}
 

import sun.security.krb5.Credentials; //导入依赖的package包/类
private static KerberosTicket getKerberosTicket ( KerberosPrincipal principal, String password, Long expire ) throws Exception {
    PrincipalName principalName = new PrincipalName(principal.getName(), PrincipalName.KRB_NT_PRINCIPAL, principal.getRealm());
    KrbAsReqBuilder builder = new KrbAsReqBuilder(principalName, password != null ? password.toCharArray() : new char[0]);

    if ( expire != null ) {
        System.out.println("Request expires " + expire);
        KerberosTime till = new KerberosTime(expire);
        Field tillF = builder.getClass().getDeclaredField("till");
        tillF.setAccessible(true);
        tillF.set(builder, till);
    }

    Credentials creds = builder.action().getCreds();
    builder.destroy();

    KerberosTicket ticket = Krb5Util.credsToTicket(creds);
    System.out.println("Ends " + ticket.getEndTime().getTime());
    return ticket;
}
 

import sun.security.krb5.Credentials; //导入依赖的package包/类
public static Credentials ticketToCreds(KerberosTicket kerbTicket)
        throws KrbException, IOException {
    return new Credentials(
        kerbTicket.getEncoded(),
        kerbTicket.getClient().getName(),
        kerbTicket.getServer().getName(),
        kerbTicket.getSessionKey().getEncoded(),
        kerbTicket.getSessionKeyType(),
        kerbTicket.getFlags(),
        kerbTicket.getAuthTime(),
        kerbTicket.getStartTime(),
        kerbTicket.getEndTime(),
        kerbTicket.getRenewTill(),
        kerbTicket.getClientAddresses());
}
 

import sun.security.krb5.Credentials; //导入依赖的package包/类
public Credentials getInitCred() {
    if (destroyed) {
        throw new IllegalStateException("This object is destroyed");
    }
    if (tgt == null) {
        return null;
    }
    try {
        return Krb5Util.ticketToCreds(tgt);
    } catch (KrbException | IOException e) {
        return null;
    }
}
 

import sun.security.krb5.Credentials; //导入依赖的package包/类
private boolean isCurrent(Credentials creds)
{
    Date endTime = creds.getEndTime();
    if (endTime != null) {
        return (System.currentTimeMillis() <= endTime.getTime());
    }
    return true;
}