1 /*

     2  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

     3  *

     4  * This code is free software; you can redistribute it and/or modify it

     5  * under the terms of the GNU General Public License version 2 only, as

     6  * published by the Free Software Foundation.  Oracle designates this

     7  * particular file as subject to the "Classpath" exception as provided

     8  * by Oracle in the LICENSE file that accompanied this code.

     9  *

    10  * This code is distributed in the hope that it will be useful, but WITHOUT

    11  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

    12  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

    13  * version 2 for more details (a copy is included in the LICENSE file that

    14  * accompanied this code).

    15  *

    16  * You should have received a copy of the GNU General Public License version

    17  * 2 along with this work; if not, write to the Free Software Foundation,

    18  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

    19  *

    20  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

    21  * or visit www.oracle.com if you need additional information or have any

    22  * questions.

    23  */

    24 

    25 /*

    26  *

    27  *  (C) Copyright IBM Corp. 1999 All Rights Reserved.

    28  *  Copyright 1997 The Open Group Research Institute.  All rights reserved.

    29  */

    30 

    31 package sun.security.krb5.internal.rcache;

    32 

    33 import java.util.Hashtable;

    34 

    35 /**

    36  * This class implements Hashtable to store the replay caches.

    37  *

    38  * @author Yanni Zhang

    39  */

    40 public class CacheTable extends Hashtable<String,ReplayCache> {

    41 

    42     private static final long serialVersionUID = -4695501354546664910L;

    43 

    44     private boolean DEBUG = sun.security.krb5.internal.Krb5.DEBUG;

    45     public CacheTable () {

    46     }

    47 

    48     /**

    49      * Puts the client timestamp in replay cache.

    50      * @params principal the client's principal name.

    51      * @params time authenticator timestamp.

    52      */

    53     public synchronized void put(String principal, AuthTime time, long currTime) {

    54         ReplayCache rc = super.get(principal);

    55         if (rc == null) {

    56             if (DEBUG) {

    57                 System.out.println("replay cache for " + principal + " is null.");

    58             }

    59             rc = new ReplayCache(principal, this);

    60             rc.put(time, currTime);

    61             if (!rc.isEmpty()) {

    62                 super.put(principal, rc);

    63             }

    64         }

    65         else {

    66             rc.put(time, currTime);

    67             if (rc.isEmpty()) {

    68                 super.remove(rc);

    69             }

    70             if (DEBUG) {

    71                 System.out.println("replay cache found.");

    72             }

    73         }

    74 

    75     }

    76 

    77     /**

    78      * This method tests if replay cache keeps a record of the authenticator's time stamp.

    79      * If there is a record (replay attack detected), the server should reject the client request.

    80      * @params principal the client's principal name.

    81      * @params time authenticator timestamp.

    82      * @return null if no record found, else return an <code>AuthTime</code> object.

    83      */

    84     public Object get(AuthTime time, String principal) {

    85         ReplayCache rc = super.get(principal);

    86         if ((rc != null) && (rc.contains(time))) {

    87             return time;

    88         }

    89         return null;

    90     }

    91 }