[DIRSERVER-166] Refactor domain objects to better encapsulate crypto behavior

• Type: New Feature
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Component/s: changepw
• Assignee: Enrique Rodriguez
• Reporter: Enrique Rodriguez
• Due: 15/Dec/04
• Created: 06/Dec/04 19:25
• Updated: 07/Apr/09 22:05
• Resolved: 15/Sep/05 07:29

Description

We currently have the following domain objects, which either may be in an encrypted or decrypted state:

EncASRepPart
EncTGSRepPart
AuthorizationData
EncryptedTimestamp
Authenticator
Ticket

Currently, the AS or TGS perform crypto operations on these objects, in 12 places. I would like to better encapsulate this behavior, along the lines of how jGSS provides simple wrap and unwrap operations. I should be able to move this behavior into 1 encrypt and 1 decrypt operation.