unmarshalTicket returns a ticket from the bytes provided.

unmarshalTicket returns a ticket from the bytes provided.

Authenticated indicates if the credential has been successfully authenticated or not.

Decrypt the encrypted part of the KRBError within the change password Reply.

Decrypt the encrypted part of the KRBError within the change password Reply.

DeriveKey derives a key from the protocol key based on the usage value.

DeriveKey derives a key from the protocol key based on the usage value.

DeriveKey derives a key from the protocol key based on the usage value.

DeriveKey derives a key from the protocol key based on the usage value.

GenerateSeqNumberAndSubKey sets the Authenticator's sequence number and subkey.

GenerateSeqNumberAndSubKey sets the Authenticator's sequence number and subkey.

GetClientRealm returns the reals of the client the credentials cache is for.

GetClientRealm returns the reals of the client the credentials cache is for.

GetEntries filters out configuration entries an returns a slice of credentials.

GetEntries filters out configuration entries an returns a slice of credentials.

GetGroupMembershipSIDs returns a slice of strings containing the group membership SIDs found in the PAC.

GetGroupMembershipSIDs returns a slice of strings containing the group membership SIDs found in the PAC.

acquire credentials for use (eg. AS exchange for KRB5)

IsFlagSet tests if a flag is set in the ASN1 BitString.

IsFlagSet tests if a flag is set in the ASN1 BitString.

Key returns the client's encryption key for the specified encryption type. The key can be retrieved either from the keytab or generated from the clien

Key returns the client's encryption key for the specified encryption type and its kvno (kvno of zero will find latest). The key can be retrieved eithe

KeytabPrincipal returns the principal name used to find the key in the keytab if it has been overridden.

Load the KRB5 configuration from the specified file path.

Load the KRB5 configuration from the specified file path.

New creates new, empty Keytab type.

NewCache creates a new client ticket cache instance.

NewSettings creates a new client settings struct.

NewSettings creates a new client settings struct.

Implementation of the n-fold algorithm as defined in RFC 3961. * Credits This golang implementation of nfold used the following project for help with

Implementation of the n-fold algorithm as defined in RFC 3961. * Credits This golang implementation of nfold used the following project for help with

ParseSPNString will parse a string in the format <service>/<name>@<realm> a PrincipalName type will be returned with the name type set to KRB_NT_PRINC

ParseSPNString will parse a string in the format <service>/<name>@<realm> a PrincipalName type will be returned with the name type set to KRB_NT_PRINC

Password returns the credential's password.

Password returns the credential's password.

ResolveRealm resolves the kerberos realm for the specified domain name from the domain to realm mapping. The most specific mapping is returned.

SessionID returns the credential's session ID.

SetCName sets the client principal name on the credential.

SetCName sets the client principal name on the credential.

Unmarshal bytes into the ETypeInfo2

Unmarshal bytes into the AuthorizationData.

Unmarshal bytes into the ETypeInfo2

Unmarshal bytes into the AuthorizationData.

Unmarshal bytes b into the KRBPriv struct.

Unmarshal bytes b into the encrypted part of KRB_CRED.

Unmarshal bytes b into the EncTicketPart struct.

Unmarshal bytes into the DeviceInfo struct

Unmarshal bytes b into the KRBPriv struct.

Unmarshal bytes b into the encrypted part of KRB_CRED.

Unmarshal bytes b into the TGSRep struct.

Unmarshal bytes b into the EncTicketPart struct.

Unmarshal bytes into the DeviceInfo struct

UnsetFlag unsets a flag in an ASN1 BitString.

UnsetFlag unsets a flag in an ASN1 BitString.

UsageToMSMsgType converts Kerberos key usage numbers to Microsoft message type encoded as a little-endian four byte slice.

UsageToMSMsgType converts Kerberos key usage numbers to Microsoft message type encoded as a little-endian four byte slice.

WithPassword sets the password in the Credentials struct.

WithPassword sets the password in the Credentials struct.

AddSession adds a session for a realm with a TGT to the client's session cache. A goroutine is started to automatically renew the TGT before expiry.

AddSession adds a session for a realm with a TGT to the client's session cache. A goroutine is started to automatically renew the TGT before expiry.

Return the filler bytes used in header

Return the filler bytes used in header

Return the 2 bytes identifying a GSS API MIC token

Return the 2 bytes identifying a GSS API MIC token

Return the 2 bytes identifying a GSS API Wrap token

Return the 2 bytes identifying a GSS API Wrap token

krb5TokenAuthenticator creates a new kerberos authenticator for kerberos MechToken

krb5TokenAuthenticator creates a new kerberos authenticator for kerberos MechToken

Parse a space delimited list of ETypes into a list of EType numbers optionally filtering out weak ETypes.

Parse the lines of a [realms] entry into the Realm struct.

Parse the lines of a [realms] entry into the Realm struct.

Parse the Keytab bytes of a principal into a Keytab entry's principal.

Parse the Keytab bytes of a principal into a Keytab entry's principal.

sendKDCTCP sends bytes to the KDC via TCP.

sendKDCTCP sends bytes to the KDC via TCP.

SendToKDC performs network actions to send data to the KDC.

SendToKDC performs network actions to send data to the KDC.

sessionTGTDetails is a thread safe way to get the TGT and session key values for a realm

sessionTGTDetails is a thread safe way to get the TGT and session key values for a realm

Log and respond to client for error conditions

update overwrites the session details with those from the TGT and decrypted encPart

update overwrites the session details with those from the TGT and decrypted encPart

ASExchange performs an AS exchange for the client to retrieve a TGT.

ASExchange performs an AS exchange for the client to retrieve a TGT.