shishi-commit
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

CVS shishi/doc


From: shishi-commit
Subject: CVS shishi/doc
Date: Fri, 10 Sep 2004 12:20:51 +0200

Update of /home/cvs/shishi/doc
In directory dopio:/tmp/cvs-serv20609

Modified Files:
        shishi.texi 
Log Message:
Add.


--- /home/cvs/shishi/doc/shishi.texi    2004/09/10 10:11:26     1.149
+++ /home/cvs/shishi/doc/shishi.texi    2004/09/10 10:20:51     1.150
@@ -3743,6 +3743,13 @@
 @node Ticket Functions
 @section Ticket Functions
 
+A Ticket is an ASN.1 structured that can be used to authenticate the
+holder to services.  It contain an encrypted part, which the ticket
+holder cannot see, but can be encrypted by the service, and various
+information about the user and service, including an encryption key to
+use for the connection.  @xref{Ticket (ASN.1) Functions}, for more
+details on the ASN.1 structure of a ticket.
+
 @include texi/tkt.c.texi
 
 
@@ -3909,6 +3916,33 @@
 @node Ticket (ASN.1) Functions
 @section Ticket (ASN.1) Functions
 
address@hidden Functions}, for an high-level overview of tickets.  The
+following illustrates the Ticket and EncTicketPart ASN.1 structure.
+
address@hidden
+Ticket          ::= [APPLICATION 1] SEQUENCE {
+        tkt-vno         [0] INTEGER (5),
+        realm           [1] Realm,
+        sname           [2] PrincipalName,
+        enc-part        [3] EncryptedData -- EncTicketPart
+}
+
+-- Encrypted part of ticket
+EncTicketPart   ::= [APPLICATION 3] SEQUENCE {
+        flags                   [0] TicketFlags,
+        key                     [1] EncryptionKey,
+        crealm                  [2] Realm,
+        cname                   [3] PrincipalName,
+        transited               [4] TransitedEncoding,
+        authtime                [5] KerberosTime,
+        starttime               [6] KerberosTime OPTIONAL,
+        endtime                 [7] KerberosTime,
+        renew-till              [8] KerberosTime OPTIONAL,
+        caddr                   [9] HostAddresses OPTIONAL,
+        authorization-data      [10] AuthorizationData OPTIONAL
+}
address@hidden verbatim
+
 @include texi/ticket.c.texi
 @include texi/encticketpart.c.texi
 





reply via email to

[Prev in Thread] Current Thread [Next in Thread]