Struct EncKdcRepPart 

pub struct EncKdcRepPart {

    pub key: EncryptionKey,
    pub last_req: LastReq,
    pub nonce: u32,
    pub key_expiration: Option<KerberosTime>,
    pub flags: TicketFlags,
    pub auth_time: KerberosTime,
    pub start_time: Option<KerberosTime>,
    pub end_time: KerberosTime,
    pub renew_till: Option<KerberosTime>,
    pub srealm: Realm,
    pub sname: PrincipalName,
    pub caddr: Option<HostAddresses>,
    pub encrypted_pa_data: Option<SequenceOf<PaData>>,
}

The encrypted part of the KdcRep body.

Fields

key: EncryptionKey

Used to pass the session key from Kerberos to the application server and the client.

last_req: LastReq

The time(s) of the last request by a principal.

Depending on what information is available, this might be the last time that a request for a TGT was made, or the last time that a request based on a TGT was successful. It also might cover all servers for a realm, or just the particular server. Some implementations MAY display this information to the user to aid in discovering unauthorized use of one’s identity. It is similar in spirit to the last login time displayed when logging in to timesharing systems.

nonce: u32

A random number generated by the client. If the same number is included in the encrypted response from the KDC, it provides evidence that the response is fresh and has not been replayed by an attacker. Nonces must never be reused.

key_expiration: Option<KerberosTime>

The time that the client’s secret key is due to expire.

flags: TicketFlags

Options that were used or requested when the ticket was issued.

auth_time: KerberosTime

The time of initial authentication for the named principal. It is the time of issue for the original ticket on which this ticket is based.

It is included in the ticket to provide additional information to the end service, and to provide the necessary information for implementation of a “hot list” service at the KDC. An end service that is particularly paranoid could refuse to accept tickets for which the initial authentication occurred “too far” in the past.

start_time: Option<KerberosTime>

The time after which the ticket is valid. Together with end_time, this field specifies the life of the ticket. If the start_time field is absent from the ticket, then the auth_time field should be used in its place to determine the life of the ticket.

end_time: KerberosTime

The time after which the ticket will not be honored (its expiration time). Note that individual services may place their own limits on the life of a ticket and MAY reject tickets which have not yet expired. As such, this is really an upper bound on the expiration time for the ticket.

renew_till: Option<KerberosTime>

The maximum end_time that may be included in a renewal. It can be thought of as the absolute expiration time for the ticket, including all renewals.

Only present in tickets that have the TicketFlags::renewable flag set in the flags field.

srealm: Realm

The realm part of the server’s principal identifier.

sname: PrincipalName

All components of the name part of the server’s identity, including those parts that identify a specific instance of a service.

caddr: Option<HostAddresses>

Addresses from which the ticket can be used.

If there are no addresses, the ticket can be used from any location. The decision by the KDC to issue or by the end server to accept addressless tickets is a policy decision and is left to the Kerberos and end-service administrators; they may refuse to issue or accept such tickets. Because of the wide deployment of network address translation, it is recommended that policy allow the issue and acceptance of such tickets.

encrypted_pa_data: Option<SequenceOf<PaData>>

Trait Implementations

impl AsnType for EncKdcRepPart

const TAG: Tag

The associated tag for the type.

const IDENTIFIER: Identifier

Identifier of an ASN.1 type as specified in the original specification if not identical with the identifier of Self

const TAG_TREE: TagTree = _

The root of this type’s tree of tag’s if it a CHOICE type, otherwise its Leaf that points Self::TAG.

const CONSTRAINTS: Constraints = Constraints::NONE

The set of constraints for values of the given type.

const IS_CHOICE: bool = false

Whether the type is choice type. PER/OER encoding rules require this knowledge.

fn is_present(&self) -> bool

Whether the type is present with value. OPTIONAL fields are common in SEQUENCE or SET.

impl Clone for EncKdcRepPart

fn clone(&self) -> EncKdcRepPart

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Constructed<13> for EncKdcRepPart

const FIELDS: Fields<13usize>

Fields contained in the “root component list”.

const IS_EXTENSIBLE: bool = false

Whether the type is extensible.

const EXTENDED_FIELDS: Option<Fields<0usize>> = None

Fields contained in the list of extensions.

impl Debug for EncKdcRepPart

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Decode for EncKdcRepPart

fn decode_with_tag_and_constraints<_DECODER: Decoder>( decoder: &mut _DECODER, tag: Tag, constraints: Constraints, ) -> Result<Self, _DECODER::Error>

Decode this value implicitly tagged with tag from a given ASN.1 decoder with a set of constraints on what values of that type are allowed.

fn decode<D>(decoder: &mut D) -> Result<Self, <D as Decoder>::Error>

where D: Decoder,

Decode this value from a given ASN.1 decoder.

fn decode_with_tag<D>( decoder: &mut D, tag: Tag, ) -> Result<Self, <D as Decoder>::Error>

where D: Decoder,

Decode this value implicitly tagged with tag from a given ASN.1 decoder.

fn decode_with_constraints<D>( decoder: &mut D, constraints: Constraints, ) -> Result<Self, <D as Decoder>::Error>

where D: Decoder,

Decode this value from a given ASN.1 decoder with a set of constraints on what values of that type are allowed.

impl Encode for EncKdcRepPart

fn encode_with_tag_and_constraints<'encoder, _ENCODER: Encoder<'encoder>>( &self, encoder: &mut _ENCODER, tag: Tag, constraints: Constraints, identifier: Identifier, ) -> Result<(), _ENCODER::Error>

Encode this value with tag into the given crate::Encoder with the constraints the values this is allowed to encode into.

fn encode<'b, E>( &self, encoder: &mut E, ) -> Result<(), <E as Encoder<'b>>::Error>

where E: Encoder<'b>,

Encodes self’s data into the given crate::Encoder.

fn encode_with_tag<'b, E>( &self, encoder: &mut E, tag: Tag, ) -> Result<(), <E as Encoder<'b>>::Error>

where E: Encoder<'b>,

Encode this value with tag into the given crate::Encoder.

fn encode_with_identifier<'b, E>( &self, encoder: &mut E, identifier: Identifier, ) -> Result<(), <E as Encoder<'b>>::Error>

where E: Encoder<'b>,

Encode this value with identifier into the given crate::Encoder.

fn encode_with_tag_and_identifier<'b, E>( &self, encoder: &mut E, tag: Tag, identifier: Identifier, ) -> Result<(), <E as Encoder<'b>>::Error>

where E: Encoder<'b>,

Encode this value with tag and identifier into the given crate::Encoder.

fn encode_with_constraints<'b, E>( &self, encoder: &mut E, constraints: Constraints, ) -> Result<(), <E as Encoder<'b>>::Error>

where E: Encoder<'b>,

Encode this value into the given crate::Encoder with the constraints the values this is allowed to encode into.

fn encode_with_constraints_and_identifier<'b, E>( &self, encoder: &mut E, constraints: Constraints, identifier: Identifier, ) -> Result<(), <E as Encoder<'b>>::Error>

where E: Encoder<'b>,

Encode this value into the given crate::Encoder with identifier and the constraints the values this is allowed to encode into.

impl Hash for EncKdcRepPart

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for EncKdcRepPart

fn cmp(&self, other: &EncKdcRepPart) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for EncKdcRepPart

fn eq(&self, other: &EncKdcRepPart) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for EncKdcRepPart

fn partial_cmp(&self, other: &EncKdcRepPart) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Eq for EncKdcRepPart

impl StructuralPartialEq for EncKdcRepPart