/usr/lib/perl5/WebAuth/Token/WebKDCService.pm is in libwebauth-perl 4.5.5-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 | # Perl representation of a WebAuth webkdc-service token.
#
# Written by Russ Allbery <rra@stanford.edu>
# Copyright 2012, 2013
# The Board of Trustees of the Leland Stanford Junior University
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to
# deal in the Software without restriction, including without limitation the
# rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
# sell copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.
package WebAuth::Token::WebKDCService;
require 5.006;
use strict;
use warnings;
use base qw(WebAuth::Token);
our $VERSION;
# This version matches the version of WebAuth with which this module was
# released, but with two digits for the minor and patch versions.
BEGIN {
$VERSION = '4.0505';
}
# Accessor methods.
sub subject { my $t = shift; $t->_attr ('subject', @_) }
sub session_key { my $t = shift; $t->_attr ('session_key', @_) }
sub creation { my $t = shift; $t->_attr ('creation', @_) }
sub expiration { my $t = shift; $t->_attr ('expiration', @_) }
1;
__END__
=for stopwords
WebAuth webkdc-service WebKDC WebKDC's KEYRING timestamp Allbery
=head1 NAME
WebAuth::Token::WebKDCService - WebAuth webkdc-service tokens
=head1 SYNOPSIS
my $token = WebAuth::Token::WebKDCService->new;
$token->subject ('user');
$token->session_key ($key);
$token->expiration (time + 3600);
print $token->encode ($keyring), "\n";
=head1 DESCRIPTION
A WebAuth webkdc-service token, sent by the WebKDC to a WAS and returned
by the WAS to the WebKDC as part of the request token. The purpose of
this token is to store the session key used for encrypting the request
token and its responses. It's encrypted in the WebKDC's long-term key,
and is therefore used by the WebKDC to recover the session key without
having local state.
=head1 CLASS METHODS
=over 4
=item new ()
Create a new, empty WebAuth::Token::WebKDCService. At least some
attributes will have to be set using the accessor methods described below
before the token can be used.
=back
=head1 INSTANCE METHODS
As with WebAuth module functions, failures are signaled by throwing
WebAuth::Exception rather than by return status.
=head1 General Methods
=over 4
=item encode (KEYRING)
Generate the encoded and encrypted form of this token using the provided
KEYRING. The encryption key used will be the one returned by the
best_key() method of WebAuth::Keyring on that KEYRING.
=back
=head1 Accessor Methods
=over 4
=item subject ([SUBJECT])
Get or set the subject, which holds the authenticated identity of the
bearer of this token. This will normally be C<krb5:> followed by the
fully-qualified Kerberos principal of the WebAuth Application Server that
requested this token.
=item session_key ([KEY])
Get or set the session key, which will be used for encrypted communication
with the entity presenting this token. This contains only the raw key
data, not a full WebAuth::Key object.
=item creation ([TIMESTAMP])
Get or set the creation timestamp for this token in seconds since epoch.
If not set, the encoded token will have a creation time set to the time
of encoding.
=item expiration ([TIMESTAMP])
Get or set the expiration timestamp for this token in seconds since epoch.
=back
=head1 AUTHOR
Russ Allbery <rra@stanford.edu>
=head1 SEE ALSO
WebAuth(3), WebAuth::Keyring(3), WebAuth::Token(3)
This module is part of WebAuth. The current version is available from
L<http://webauth.stanford.edu/>.
=cut
|