com.goldencode.p2j.security

Class SecurityManagerAuthenticator

java.lang.Object

com.goldencode.p2j.security.SecurityManagerAuthenticator

All Implemented Interfaces:

Authenticator, SecurityConstants

class SecurityManagerAuthenticator
extends java.lang.Object
implements Authenticator

SecurityManager implementation of Authenticator interface moved to its own class. Using it through SecurityManager.serverAuthenticator allows resetting SecurityManager instance.

Field Summary

Fields

Modifier and Type	Field and Description
private java.lang.String	authOption The value of "option" node from AuthPlugin for this Authenticator
private static CentralLogger	LOG Logger.
private SecurityManager	sm SecurityManager instance.

Fields inherited from interface com.goldencode.p2j.security.SecurityConstants

AUTH_ACTION_ABORT, AUTH_ACTION_CONTINUE, AUTH_ACTION_DONE, AUTH_ACTION_RETRY, AUTH_MODE_CUSTOM, AUTH_MODE_HIGHEST, AUTH_MODE_IDPW, AUTH_MODE_LOWEST, AUTH_MODE_NONE, AUTH_MODE_X509, AUTH_MODE_X509_IDPW, AUTH_REQ_PROCESS, AUTH_REQ_PROGRAM, AUTH_REQ_SSO, AUTH_REQ_USER, AUTH_RESULT_INSUFFICIENT_RIGHTS, AUTH_RESULT_INVALID_PASSWORD, AUTH_RESULT_INVALID_USERID, AUTH_RESULT_NONE, AUTH_RESULT_PER_USER_SESSION_LIMIT_REACHED, AUTH_RESULT_SKIP_TO_NEXT, AUTH_RESULT_SUCCESS, AUTH_RESULT_SYSTEM_SESSION_LIMIT_REACHED, AUTH_RESULT_UNSPECIFIED_FAILURE, PKT_SIZE_SKIP_TO_NEXT

Constructor Summary

Constructors

Constructor and Description
SecurityManagerAuthenticator(SecurityManager securityManager) Public constructor.

Method Summary

Modifier and Type	Method and Description
private void	agePassword(UserAccount user) Calculates the age of the existing user account password and checks to see whether it is too old, according to the maxAge parameter.
private boolean	checkPassword(java.lang.String plain, UserAccount user) Verifies the plain text password against the one stored with the specified user account.
byte[]	clientAuthHook(java.util.Map<java.lang.String,java.lang.Object> parameters, int code) Implements client side standard authentication logic.
(package private) byte[]	clientAuthHookWorker(java.util.Map<java.lang.String,java.lang.Object> parameters, int code, BootstrapConfig config) Implements client side standard authentication logic.
void	clientFinalize() Finalizes any resources allocated during authentication by the client.
void	configure(java.lang.String option) Configures the Authenticator by setting the "option" parameter from directory.xml.
java.util.Set<java.lang.String>	getAuthenticationEntities() Returns a set of entities that this class handles.
SessionListener	getSessionListener() Always returns null.
AuthenticationResponse	serverAuthHook(byte[] auth, java.lang.String entity) Implements server side standard authorization logic.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOG

private static final CentralLogger LOG

Logger.

sm

private SecurityManager sm

SecurityManager instance.

authOption

private java.lang.String authOption

The value of "option" node from AuthPlugin for this Authenticator

Constructor Detail

SecurityManagerAuthenticator

SecurityManagerAuthenticator(SecurityManager securityManager)

Public constructor.

Parameters:

securityManager - SecurityManager instance.

Method Detail

clientAuthHook

public byte[] clientAuthHook(java.util.Map<java.lang.String,java.lang.Object> parameters,
                             int code)

Implements client side standard authentication logic.

Returns a byte array to be transmitted to the server as authentication input. The userid and password values will be obtained by prompting the user using stdin and stdout.

If this method is called, it simply provides a userID and password no matter what authentication mode is. It works, because certificates are verified before the call, if the authentication mode required that.

This logic allows specifying com.goldencode.p2j.security.SecurityManager as a hook name.

Specified by:

clientAuthHook in interface Authenticator

Parameters:

parameters - Additional configuration parameters. Not used in this implementation.

code - The result of the most recent attempt to authenticate or AUTH_RESULT_NONE if this is the first attempt.

Returns:

Array of bytes that is taken as an authentication input. The array is suitable for passing to serverAuthHook(byte[], java.lang.String) for authentication processing.

clientFinalize

public void clientFinalize()

Finalizes any resources allocated during authentication by the client.

Specified by:

clientFinalize in interface Authenticator

serverAuthHook

public AuthenticationResponse serverAuthHook(byte[] auth,
                                             java.lang.String entity)

Implements server side standard authorization logic.

Accepts the byte array produced by the client side authorization hook as the authentication input, and custom parameters.

Specified by:

serverAuthHook in interface Authenticator

Parameters:

auth - The authentication input from the client in a form that is created using SecurityUtil.packageIdPassword(java.lang.String, java.lang.String).

entity - Entity to be processed. Not used in this implementation.

Returns:

The authentication result.

getSessionListener

public SessionListener getSessionListener()

Always returns null.

Specified by:

getSessionListener in interface Authenticator

Returns:

Always null.

configure

public void configure(java.lang.String option)

Configures the Authenticator by setting the "option" parameter from directory.xml.

Specified by:

configure in interface Authenticator

Parameters:

option - The value of "option" entry for the auth plugin.

getAuthenticationEntities

public java.util.Set<java.lang.String> getAuthenticationEntities()

Returns a set of entities that this class handles. The list of entities / parameters will be configured using other ways.

Specified by:

getAuthenticationEntities in interface Authenticator

Returns:

Always null.

clientAuthHookWorker

byte[] clientAuthHookWorker(java.util.Map<java.lang.String,java.lang.Object> parameters,
                            int code,
                            BootstrapConfig config)

Implements client side standard authentication logic.

Returns a byte array to be transmitted to the server as authentication input. If not contained in the given bootstrap configuration, the userid and password values will be obtained by prompting the user using stdin and stdout.

If this method is called, it simply provides a userID and password no matter what authentication mode is. It works, because certificates are verified before the call, if the authentication mode required that.

Parameters:

parameters - Additional configuration parameters. Not used in this implementation.

code - The result of the most recent attempt to authenticate or AUTH_RESULT_NONE if this is the first attempt.

config - Configuration data upon which to base default processing.

Returns:

Array of bytes that is taken as an authentication input. The array is suitable for passing to serverAuthHook(byte[], java.lang.String) for authentication processing.

checkPassword

private boolean checkPassword(java.lang.String plain,
                              UserAccount user)

Verifies the plain text password against the one stored with the specified user account.

Parameters:

plain - plain text password

user - UserAccount instance

Returns:

true if password is valid

agePassword

private void agePassword(UserAccount user)

Calculates the age of the existing user account password and checks to see whether it is too old, according to the maxAge parameter.

Parameters:

user - UserAccount instance