Struct KerberosClient 

pub struct KerberosClient {
    pub client_principal: PrincipalName,
    pub realm: String,
    /* private fields */
}

Kerberos v5 client.

Handles AS-REQ (initial authentication) and TGS-REQ (service ticket request) flows.

Fields

client_principal: PrincipalName

Client principal

realm: String

Realm

Implementations

impl KerberosClient

pub fn new(username: &str, realm: &str, password: &str) -> Self

Create a new Kerberos client.

Derives a long-term key from the password using string2key.

pub fn has_valid_tgt(&self) -> bool

Whether the client has a valid (non-expired) TGT.

pub fn tgt(&self) -> Option<&Ticket>

Get the TGT, if present.

pub fn session_key(&self) -> Option<&[u8]>

Get the session key, if present.

pub fn request_tgt(&mut self) -> Vec<u8>

Build an AS-REQ message to request a TGT.

Returns BER-encoded bytes ready to send to the KDC.

pub fn parse_as_rep(&mut self, _data: &[u8]) -> Result<AsRepParts, KernelError>

Parse an AS-REP message.

Extracts the TGT and encrypted part. The caller must decrypt the encrypted part using the client’s long-term key to obtain the session key.

pub fn store_tgt( &mut self, ticket: Ticket, session_key: Vec<u8>, expiry: KerberosTime, )

Store a TGT obtained from an AS-REP.

pub fn request_service_ticket( &mut self, service: &str, hostname: &str, ) -> Result<Vec<u8>, KernelError>

Build a TGS-REQ message to request a service ticket.

Requires a valid TGT (obtained via request_tgt + parse_as_rep).

pub fn parse_tgs_rep( &mut self, _data: &[u8], ) -> Result<TgsRepParts, KernelError>

Parse a TGS-REP message.

pub fn key(&self) -> &[u8]

Get the client’s derived key.

pub fn realm(&self) -> &str

Get the realm.