AssumePreAuthentication indicates if the client should proactively assume using pre-authentication.

AssumePreAuthentication indicates if the client should proactively assume using pre-authentication.

ChangePasswd changes the password of the client to the value provided.

ChangePasswd changes the password of the client to the value provided.

ClientAddress returns the client host address which has been provided to the service.

ClientAddress returns the client host address which has been provided to the service.

DeriveRandom generates data needed for key generation.

DeriveRandom generates data needed for key generation.

DisablePAFXFAST used to configure the client to not use PA_FX_FAST. s := NewSettings(DisablePAFXFAST(true))

EncryptData encrypts the data provided using methods specific to the etype provided as defined in RFC 4757.

EncryptData encrypts the data provided using methods specific to the etype provided as defined in RFC 4757.

EncryptEncPart encrypts the DecryptedEncPart within the KRBPriv. Use to prepare for marshaling.

EncryptEncPart encrypts the DecryptedEncPart within the KRBPriv. Use to prepare for marshaling.

Error implements the error interface for invalid config error.

Error implements the error interface for invalid config error.

GetChecksumHash returns a keyed checksum hash of the bytes provided.

GetChecksumHash returns a keyed checksum hash of the bytes provided.

GetChecksumHash returns a keyed checksum hash of the bytes provided.

GetChecksumHash returns a keyed checksum hash of the bytes provided.

GetClientCredentials returns a Credentials object representing the client of the credentials cache.

GetClientCredentials returns a Credentials object representing the client of the credentials cache.

GetClientPrincipalName returns a PrincipalName type for the client the credentials cache is for.

GetClientPrincipalName returns a PrincipalName type for the client the credentials cache is for.

GetConfounderByteSize returns the byte count for confounder to be used during cryptographic operations.

GetConfounderByteSize returns the byte count for confounder to be used during cryptographic operations.

GetConfounderByteSize returns the byte count for confounder to be used during cryptographic operations.

GetConfounderByteSize returns the byte count for confounder to be used during cryptographic operations.

GetEntry returns a specific credential for the PrincipalName provided.

GetEntry returns a specific credential for the PrincipalName provided.

GetHash generates the keyed hash value according to the etype's hash function.

GetHash generates the keyed hash value according to the etype's hash function.

GetSalt returns a salt derived from the PrincipalName.

GetSalt returns a salt derived from the PrincipalName.

KDF_HMAC_SHA2 key derivation: https://tools.ietf.org/html/rfc8009#section-3

KDF_HMAC_SHA2 key derivation: https://tools.ietf.org/html/rfc8009#section-3

Keytab returns the credential's Keytab.

Marshal SPNEGO context token

Marshal SPNEGO context token

Marshal the KRBPriv.

Marshal a KRBError into bytes.

Marshal APReq struct.

Marshal ChangePasswdData into a byte slice.

Marshal the KRBPriv.

Marshal APReq struct.

Marshal ChangePasswdData into a byte slice.

MarshalTicketSequence marshals a slice of Tickets returning an ASN1 raw value containing the ticket sequence.

MarshalTicketSequence marshals a slice of Tickets returning an ASN1 raw value containing the ticket sequence.

MaxClockSkew returns the maximum acceptable clock skew between the service and the issue time of kerberos tickets. If none is defined a duration of 5

MaxClockSkew returns the maximum acceptable clock skew between the service and the issue time of kerberos tickets. If none is defined a duration of 5

NewASReq generates a new KRB_AS_REQ struct for a given SNAME.

NewASReq generates a new KRB_AS_REQ struct for a given SNAME.

NewClient returns an SPNEGO enabled HTTP client.

NewClient returns a SPNEGO enabled HTTP client. Be careful when passing in the *http.Client if it is beginning reused in multiple calls to this functi

NewConfigFromScanner creates a new Config struct from a bufio.Scanner.

NewErrorf creates a new Krberror from a formatted string.

NewErrorf creates a new Krberror from a formatted string.

NewFromScanner creates a new Config struct from a bufio.Scanner.

NewKRB5TokenAPREQ creates a new KRB5 token with AP_REQ

NewKRB5TokenAPREQ creates a new KRB5 token with AP_REQ

ProcessPACInfoBuffers processes the PAC Info Buffers. https://msdn.microsoft.com/en-us/library/cc237954.aspx

ProcessPACInfoBuffers processes the PAC Info Buffers. https://msdn.microsoft.com/en-us/library/cc237954.aspx

ResolveRealm resolves the kerberos realm for the specified domain name from the domain to realm mapping. The most specific mapping is returned.

SName returns the specific service name to the service.

SName returns the specific service name to the service.

SPNEGOClient configures the SPNEGO mechanism suitable for client side use.

SPNEGOKRB5Authenticate is a Kerberos SPNEGO authentication HTTP handler wrapper.

SPNEGOService configures the SPNEGO mechanism suitable for service side use.

SPNEGOService configures the SPNEGO mechanism suitable for service side use.

SetADCredentials adds ADCredentials attributes to the credentials

SetADCredentials adds ADCredentials attributes to the credentials

SetAuthTime sets the time the credential was authenticated.

SetAuthTime sets the time the credential was authenticated.

SetAuthenticated sets the credential as having been successfully authenticated.

SetAuthenticated sets the credential as having been successfully authenticated.

Unmarshal bytes into the Authenticator.

Unmarshal bytes into the PAEncTSEnc

Unmarshal a byte slice into Credentials

Unmarshal bytes into the Authenticator.

Unmarshal bytes into the PAEncTSEnc

Unmarshal a KRB5Token.

Unmarshal bytes b into the EncKrbPrivPart struct.

Unmarshal bytes b into the KRBSafe struct.

Unmarshal bytes b into the APRep encrypted part struct.

Unmarshal bytes b into the APReq struct.

Unmarshal bytes into the PACType struct

Unmarshal bytes into the SignatureData struct

Unmarshal bytes b into the EncKrbPrivPart struct.

Unmarshal bytes b into the KRBSafe struct.

Unmarshal bytes b into the APRep encrypted part struct.

Unmarshal bytes b into the APReq struct.

Unmarshal bytes into the PACType struct

Unmarshal bytes into the SignatureData struct

WithKeytab sets the Keytab in the Credentials struct.

WithKeytab sets the Keytab in the Credentials struct.

Write the keytab bytes to io.Writer. Returns the number of bytes written

Write the keytab bytes to io.Writer. Returns the number of bytes written

addEntry adds a ticket to the cache.