org.apache.directory.server.core.authn

Class DelegatingAuthenticator

java.lang.Object

org.apache.directory.server.core.authn.AbstractAuthenticator

org.apache.directory.server.core.authn.DelegatingAuthenticator

All Implemented Interfaces:

Authenticator

public class DelegatingAuthenticator
extends AbstractAuthenticator

Authenticator delegating to another LDAP server.

Field Summary

Fields

Modifier and Type	Field and Description
private java.lang.String	delegateHost The host in charge of delegated authentication
private int	delegatePort The associated port
private boolean	delegateSsl Tells if we use SSL to connect
private java.lang.String	delegateSslTrustManagerFQCN The SSL TrustManager FQCN to use
private boolean	delegateTls Tells if we use StartTLS to connect
private java.lang.String	delegateTlsTrustManagerFQCN The startTLS TrustManager FQCN to use
private static boolean	IS_DEBUG A speedup for logger in debug mode

Fields inherited from class org.apache.directory.server.core.authn.AbstractAuthenticator

LOG

Constructor Summary

Constructors

Modifier	Constructor and Description
	DelegatingAuthenticator() Creates a new instance.
protected	DelegatingAuthenticator(org.apache.directory.api.ldap.model.constants.AuthenticationLevel type, org.apache.directory.api.ldap.model.name.Dn baseDn) Creates a new instance, for a specific authentication level.
	DelegatingAuthenticator(org.apache.directory.api.ldap.model.name.Dn baseDn) Creates a new instance.

Method Summary

Modifier and Type	Method and Description
LdapPrincipal	authenticate(BindOperationContext bindContext) Performs authentication and returns the principal if succeeded.
void	checkPwdPolicy(org.apache.directory.api.ldap.model.entry.Entry userEntry) We don't handle any password policy when using a delegated authentication
java.lang.String	getDelegateBaseDn()
java.lang.String	getDelegateHost()
int	getDelegatePort()
java.lang.String	getDelegateSslTrustManagerFQCN()
java.lang.String	getDelegateTlsTrustManagerFQCN()
void	invalidateCache(org.apache.directory.api.ldap.model.name.Dn bindDn) We don't handle any cache when using a delegated authentication
boolean	isDelegateSsl()
boolean	isDelegateTls()
void	setDelegateHost(java.lang.String delegateHost)
void	setDelegatePort(int delegatePort)
void	setDelegateSsl(boolean delegateSsl)
void	setDelegateSslTrustManagerFQCN(java.lang.String delegateSslTrustManagerFQCN)
void	setDelegateTls(boolean delegateTls)
void	setDelegateTlsTrustManagerFQCN(java.lang.String delegateTlsTrustManagerFQCN)

Methods inherited from class org.apache.directory.server.core.authn.AbstractAuthenticator

destroy, doDestroy, doInit, getAuthenticatorType, getBaseDn, getDirectoryService, init, isValid, setBaseDn

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

IS_DEBUG

private static final boolean IS_DEBUG

A speedup for logger in debug mode

delegateHost

private java.lang.String delegateHost

The host in charge of delegated authentication

delegatePort

private int delegatePort

The associated port

delegateSsl

private boolean delegateSsl

Tells if we use SSL to connect

delegateTls

private boolean delegateTls

Tells if we use StartTLS to connect

delegateSslTrustManagerFQCN

private java.lang.String delegateSslTrustManagerFQCN

The SSL TrustManager FQCN to use

delegateTlsTrustManagerFQCN

private java.lang.String delegateTlsTrustManagerFQCN

The startTLS TrustManager FQCN to use

Constructor Detail

DelegatingAuthenticator

public DelegatingAuthenticator()

Creates a new instance.

DelegatingAuthenticator

public DelegatingAuthenticator(org.apache.directory.api.ldap.model.name.Dn baseDn)

Creates a new instance.

See Also:

AbstractAuthenticator

DelegatingAuthenticator

protected DelegatingAuthenticator(org.apache.directory.api.ldap.model.constants.AuthenticationLevel type,
                                  org.apache.directory.api.ldap.model.name.Dn baseDn)

Creates a new instance, for a specific authentication level.

Parameters:

type - The relevant AuthenticationLevel

See Also:

AbstractAuthenticator

Method Detail

getDelegateHost

public java.lang.String getDelegateHost()

Returns:

the delegateHost

setDelegateHost

public void setDelegateHost(java.lang.String delegateHost)

Parameters:

delegateHost - the delegateHost to set

getDelegatePort

public int getDelegatePort()

Returns:

the delegatePort

setDelegatePort

public void setDelegatePort(int delegatePort)

Parameters:

delegatePort - the delegatePort to set

isDelegateSsl

public boolean isDelegateSsl()

Returns:

the delegateSsl

setDelegateSsl

public void setDelegateSsl(boolean delegateSsl)

Parameters:

delegateSsl - the delegateSsl to set

getDelegateBaseDn

public java.lang.String getDelegateBaseDn()

Returns:

the delegateBaseDn

isDelegateTls

public boolean isDelegateTls()

Returns:

the delegateTls

setDelegateTls

public void setDelegateTls(boolean delegateTls)

Parameters:

delegateTls - the delegateTls to set

getDelegateSslTrustManagerFQCN

public java.lang.String getDelegateSslTrustManagerFQCN()

Returns:

the delegateSslTrustManagerFQCN

setDelegateSslTrustManagerFQCN

public void setDelegateSslTrustManagerFQCN(java.lang.String delegateSslTrustManagerFQCN)

Parameters:

delegateSslTrustManagerFQCN - the delegateSslTrustManagerFQCN to set

getDelegateTlsTrustManagerFQCN

public java.lang.String getDelegateTlsTrustManagerFQCN()

Returns:

the delegateTlsTrustManagerFQCN

setDelegateTlsTrustManagerFQCN

public void setDelegateTlsTrustManagerFQCN(java.lang.String delegateTlsTrustManagerFQCN)

Parameters:

delegateTlsTrustManagerFQCN - the delegateTlsTrustManagerFQCN to set

authenticate

public LdapPrincipal authenticate(BindOperationContext bindContext)
                           throws java.lang.Exception

Performs authentication and returns the principal if succeeded.

Parameters:

bindContext - The Bind context

Throws:

java.lang.Exception

checkPwdPolicy

public void checkPwdPolicy(org.apache.directory.api.ldap.model.entry.Entry userEntry)
                    throws org.apache.directory.api.ldap.model.exception.LdapException

We don't handle any password policy when using a delegated authentication

Specified by:

checkPwdPolicy in interface Authenticator

Overrides:

checkPwdPolicy in class AbstractAuthenticator

Parameters:

userEntry - the user entry to be checked for authentication

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

invalidateCache

public void invalidateCache(org.apache.directory.api.ldap.model.name.Dn bindDn)

We don't handle any cache when using a delegated authentication

Specified by:

invalidateCache in interface Authenticator

Overrides:

invalidateCache in class AbstractAuthenticator

Parameters:

bindDn - the already normalized distinguished name of the bind principal