Extract principal on server side from outToken/KRB_AP_REQ

Hey,

I have a Kerberos SSO application with JAAS/JGSSAPI according to the tutorial which can be found here: http://java.sun.com/j2se/1.4.2/docs/guide/security/jgss/single-signon.html

Mutual authentication with initSecContext() and acceptSecContext() works fine. Now, on the server side, I would like to extract the principal from the outToken. In Kerberos terms this means the KRB_AP_REQ message which is generated by initSecContext() and send to the server.

Is there any possibility to get the principal's name from this byte array?

[559 byte] By [Santacruzshoresa] at [2008-2-19]