Struct PyKrb5PrincipalName 

pub struct PyKrb5PrincipalName { /* private fields */ }

RFC 4556 KRB5PrincipalName — Kerberos principal embedded in a PKINIT certificate as an OtherName Subject Alternative Name.

KRB5PrincipalName is defined in RFC 4556 §3.2.2 as:

KRB5PrincipalName ::= SEQUENCE {
    realm         [0] Realm,          -- GeneralString
    principalName [1] PrincipalName   -- RFC 4120 §5.2.2
}

PrincipalName ::= SEQUENCE {
    name-type   [0] Int32,
    name-string [1] SEQUENCE OF KerberosString  -- GeneralString
}

The OtherName OID for this type is 1.3.6.1.5.2.2, available as synta.krb5.KRB5_PRINCIPAL_NAME_OID.

Name types — use the NT_* module constants:

• NT_PRINCIPAL (1) — user principal, e.g. alice@EXAMPLE.COM
• NT_SRV_INST (2) — service + instance, e.g. krbtgt/EXAMPLE.COM
• NT_SRV_HST (3) — service + hostname, e.g. host/server.example.com
• NT_ENTERPRISE (10) — enterprise (UPN-style), e.g. user@domain.example

Display format: Kerberos principal strings conventionally use / to join components and @ to separate from the realm: service/instance@REALM. This class stores the components and realm individually; format them yourself if you need a display string.

Example — PKINIT TGT principal for EXAMPLE.COM:

import synta.krb5

name = synta.krb5.Krb5PrincipalName(
    realm="EXAMPLE.COM",
    name_type=synta.krb5.NT_SRV_INST,
    components=["krbtgt", "EXAMPLE.COM"],
)
# OID for OtherName: synta.krb5.KRB5_PRINCIPAL_NAME_OID  (1.3.6.1.5.2.2)
der_bytes = name.to_der()   # DER SEQUENCE bytes for OtherName.value

Example — decode from an OtherName SAN value:

parsed = synta.krb5.Krb5PrincipalName.from_der(der_bytes)
print(parsed.realm)              # "EXAMPLE.COM"
print("/".join(parsed.components) + "@" + parsed.realm)
# "krbtgt/EXAMPLE.COM@EXAMPLE.COM"

Trait Implementations

impl<'py> IntoPyObject<'py> for PyKrb5PrincipalName

type Target = PyKrb5PrincipalName

The Python output type

type Output = Bound<'py, <PyKrb5PrincipalName as IntoPyObject<'py>>::Target>

The smart pointer type to use.

type Error = PyErr

The type returned in the event of a conversion error.

fn into_pyobject( self, py: Python<'py>, ) -> Result<<Self as IntoPyObject<'_>>::Output, <Self as IntoPyObject<'_>>::Error>

Performs the conversion.

impl PyClass for PyKrb5PrincipalName

type Frozen = True

Whether the pyclass is frozen.

impl PyClassImpl for PyKrb5PrincipalName

const IS_BASETYPE: bool = false

#[pyclass(subclass)]

const IS_SUBCLASS: bool = false

#[pyclass(extends=…)]

const IS_MAPPING: bool = false

#[pyclass(mapping)]

const IS_SEQUENCE: bool = false

#[pyclass(sequence)]

const IS_IMMUTABLE_TYPE: bool = false

#[pyclass(immutable_type)]

const RAW_DOC: &'static CStr = /// RFC 4556 ``KRB5PrincipalName`` — Kerberos principal embedded in a PKINIT /// certificate as an ``OtherName`` Subject Alternative Name. /// /// ``KRB5PrincipalName`` is defined in RFC 4556 §3.2.2 as: /// /// ```text /// KRB5PrincipalName ::= SEQUENCE { /// realm [0] Realm, -- GeneralString /// principalName [1] PrincipalName -- RFC 4120 §5.2.2 /// } /// /// PrincipalName ::= SEQUENCE { /// name-type [0] Int32, /// name-string [1] SEQUENCE OF KerberosString -- GeneralString /// } /// ``` /// /// The ``OtherName`` OID for this type is ``1.3.6.1.5.2.2``, /// available as ``synta.krb5.KRB5_PRINCIPAL_NAME_OID``. /// /// **Name types** — use the ``NT_*`` module constants: /// /// * ``NT_PRINCIPAL`` (1) — user principal, e.g. ``alice@EXAMPLE.COM`` /// * ``NT_SRV_INST`` (2) — service + instance, e.g. ``krbtgt/EXAMPLE.COM`` /// * ``NT_SRV_HST`` (3) — service + hostname, e.g. ``host/server.example.com`` /// * ``NT_ENTERPRISE`` (10) — enterprise (UPN-style), e.g. ``user@domain.example`` /// /// **Display format**: Kerberos principal strings conventionally use /// ``/`` to join components and ``@`` to separate from the realm: /// ``service/instance@REALM``. This class stores the components and realm /// individually; format them yourself if you need a display string. /// /// Example — PKINIT TGT principal for ``EXAMPLE.COM``: /// /// ```python /// import synta.krb5 /// /// name = synta.krb5.Krb5PrincipalName( /// realm="EXAMPLE.COM", /// name_type=synta.krb5.NT_SRV_INST, /// components=["krbtgt", "EXAMPLE.COM"], /// ) /// # OID for OtherName: synta.krb5.KRB5_PRINCIPAL_NAME_OID (1.3.6.1.5.2.2) /// der_bytes = name.to_der() # DER SEQUENCE bytes for OtherName.value /// ``` /// /// Example — decode from an OtherName SAN value: /// /// ```python /// parsed = synta.krb5.Krb5PrincipalName.from_der(der_bytes) /// print(parsed.realm) # "EXAMPLE.COM" /// print("/".join(parsed.components) + "@" + parsed.realm) /// # "krbtgt/EXAMPLE.COM@EXAMPLE.COM" /// ```

Docstring for the class provided on the struct or enum.

const DOC: &'static CStr

Fully rendered class doc, including the text_signature if a constructor is defined.

type BaseType = PyAny

Base class

type ThreadChecker = SendablePyClass<PyKrb5PrincipalName>

This handles following two situations:

type PyClassMutability = <<PyAny as PyClassBaseType>::PyClassMutability as PyClassMutability>::ImmutableChild

Immutable or mutable

type Dict = PyClassDummySlot

Specify this class has #[pyclass(dict)] or not.

type WeakRef = PyClassDummySlot

Specify this class has #[pyclass(weakref)] or not.

type BaseNativeType = PyAny

The closest native ancestor. This is PyAny by default, and when you declare #[pyclass(extends=PyDict)], it’s PyDict.

fn items_iter() -> PyClassItemsIter

fn lazy_type_object() -> &'static LazyTypeObject<Self>

fn dict_offset() -> Option<isize>

fn weaklist_offset() -> Option<isize>

impl PyClassNewTextSignature for PyKrb5PrincipalName

const TEXT_SIGNATURE: &'static str = "(realm, name_type, components)"

impl PyClass__eq__SlotFragment<PyKrb5PrincipalName> for PyClassImplCollector<PyKrb5PrincipalName>

unsafe fn __eq__( self, py: Python<'_>, _raw_slf: *mut PyObject, arg0: *mut PyObject, ) -> PyResult<*mut PyObject>

Safety: _slf and _other must be valid non-null Python objects

impl PyMethods<PyKrb5PrincipalName> for PyClassImplCollector<PyKrb5PrincipalName>

fn py_methods(self) -> &'static PyClassItems

impl PyTypeInfo for PyKrb5PrincipalName

const NAME: &'static str = "Krb5PrincipalName"

Class name.

const MODULE: Option<&'static str> = ::core::option::Option::None

Module name, if any.

fn type_object_raw(py: Python<'_>) -> *mut PyTypeObject

Returns the PyTypeObject instance for this type.

fn type_object(py: Python<'_>) -> Bound<'_, PyType>

Returns the safe abstraction over the type object.

fn is_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type or a subclass of this type.

fn is_exact_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type.

impl DerefToPyAny for PyKrb5PrincipalName

impl ExtractPyClassWithClone for PyKrb5PrincipalName