Package org.globus.gsi.gssapi
Class GSSConstants
java.lang.Object
org.globus.gsi.gssapi.GSSConstants
Defines common GSI-GSS constants.
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final Oid
Context option.static final Oid
Context option.static final Oid
Context option.static final Oid
Context option.static final Oid
Deprecated.static final int
Quality-of-Protection (QOP) value, indicates large block size support.static final Oid
Context option.static final Oid
Globus GSI GSS mechanism Oidstatic final Oid
Context option.static final Oid
Used in inquireByOid method.static final Oid
Context option.static final Oid
Context option.static final Oid
Context option.static final Oid
Used in inquireByOid function. -
Constructor Summary
Constructors -
Method Summary
-
Field Details
-
MECH_OID
Globus GSI GSS mechanism Oid -
GSS_MODE
Context option. It is used to configure the GSS mode. It can be set toGSIConstants.MODE_GSI
orGSIConstants.MODE_SSL
. By default GSI mode is enabled. -
REJECT_LIMITED_PROXY
Context option. It is used to enable/disable the rejection of limited proxies during authentication. In can be set to eitherBoolean.TRUE
orBoolean.FALSE
. By default limited proxies are accepted. -
DELEGATION_TYPE
Context option. It is used to configure delegation type to be performed either during authentication or using the delegation API. It can be set toGSIConstants.DELEGATION_TYPE_LIMITED
orGSIConstants.DELEGATION_TYPE_FULL
By default limited delegation is performed. -
CHECK_CONTEXT_EXPIRATION
Context option. It is used to enable/disable context expiration checking for methods likewrap, unwrap, verifyMIC, getMIC
. In can be set to eitherBoolean.TRUE
orBoolean.FALSE
. By default context expiration checking is disabled. -
REQUIRE_CLIENT_AUTH
Context option. It is used to enable/disable client authentication on acceptor side. In can be set to eitherBoolean.TRUE
orBoolean.FALSE
. By default client authentication is enabled. -
ACCEPT_NO_CLIENT_CERTS
Context option. It is only used when client authentication is enabled. In can be set to eitherBoolean.TRUE
orBoolean.FALSE
. If set toBoolean.TRUE
a context will be successfully established even though client send no certificates and client authentication was required. If set toBoolean.FALSE
, the context establishment will fail if client does not send its certificates and client authentication was requested. -
GRIM_POLICY_HANDLER
Deprecated.Please useGSSConstants.PROXY_POLICY_HANDLERS
option instead.Context option. It is used to set a policy handler for GRIM credentials. The value is an instance ofProxyPolicyHandler
-
PROXY_POLICY_HANDLERS
Context option. It is used to pass a set of proxy policy handlers. The value if aMap
type. It contains mappings of proxy policy language oids and instances ofProxyPolicyHandler
-
TRUSTED_CERTIFICATES
Context option. It is used to set a list of trusted certificates to use during authentication (by default, the trusted certificates are loaded from a standard location) The value is an instance ofTrustedCertificates
-
X509_CERT_CHAIN
Used in inquireByOid function. Returns the certificate chain. -
RECEIVED_LIMITED_PROXY
Used in inquireByOid method. Retuns if peer presented a limited credential -
AUTHZ_REQUIRED_WITH_DELEGATION
Context option. It is set to a Boolean value and if false, client authorization requirement with delegation is disabled. By default, client side authorization (to authorize the server) is required for delegation of credentials. -
GSI_BIG
public static final int GSI_BIGQuality-of-Protection (QOP) value, indicates large block size support. Can be passed towrap
or set byunwrap
methods- See Also:
-
-
Constructor Details
-
GSSConstants
public GSSConstants()
-
GSSConstants.PROXY_POLICY_HANDLERS
option instead.