org.apache.directory.server.core.hash

Class PasswordHashingInterceptor

java.lang.Object

org.apache.directory.server.core.api.interceptor.BaseInterceptor

org.apache.directory.server.core.hash.PasswordHashingInterceptor

All Implemented Interfaces:

Interceptor

Direct Known Subclasses:

CryptPasswordHashingInterceptor, Md5PasswordHashingInterceptor, Pkcs5s2PasswordHashingInterceptor, Sha256PasswordHashingInterceptor, Sha384PasswordHashingInterceptor, Sha512PasswordHashingInterceptor, ShaPasswordHashingInterceptor, Smd5PasswordHashingInterceptor, Ssha256PasswordHashingInterceptor, Ssha384PasswordHashingInterceptor, Ssha512PasswordHashingInterceptor, SshaPasswordHashingInterceptor

public abstract class PasswordHashingInterceptor
extends BaseInterceptor

An interceptor to hash plain text password according to the configured hashing algorithm.

Field Summary

Fields

Modifier and Type	Field and Description
private org.apache.directory.api.ldap.model.constants.LdapSecurityConstants	algorithm the hashing algorithm to be used, if null then the password won't be changed

Fields inherited from class org.apache.directory.server.core.api.interceptor.BaseInterceptor

directoryService, dnFactory, PWD_POLICY_STATE_ATTRIBUTE_TYPES, schemaManager

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	PasswordHashingInterceptor(java.lang.String name, org.apache.directory.api.ldap.model.constants.LdapSecurityConstants algorithm) Creates a new instance of PasswordHashingInterceptor which hashes the incoming non-hashed password using the given algorithm.

Method Summary

Modifier and Type	Method and Description
void	add(AddOperationContext addContext) Filters Partition#add( AddOperationContext ) call.
private org.apache.directory.api.ldap.model.entry.Attribute	includeHashedPassword(org.apache.directory.api.ldap.model.entry.Attribute pwdAt) hash the password if it was not already hashed
void	modify(ModifyOperationContext modifyContext) Filters Partition#modify( ModifyOperationContext ) call.

Methods inherited from class org.apache.directory.server.core.api.interceptor.BaseInterceptor

bind, compare, delete, destroy, getName, getNextInterceptor, getPrincipal, getRootDse, hasEntry, init, lookup, move, moveAndRename, next, next, next, next, next, next, next, next, next, next, next, next, next, rename, search, unbind

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

algorithm

private org.apache.directory.api.ldap.model.constants.LdapSecurityConstants algorithm

the hashing algorithm to be used, if null then the password won't be changed

Constructor Detail

PasswordHashingInterceptor

protected PasswordHashingInterceptor(java.lang.String name,
                                     org.apache.directory.api.ldap.model.constants.LdapSecurityConstants algorithm)

Creates a new instance of PasswordHashingInterceptor which hashes the incoming non-hashed password using the given algorithm. If the password is found already hashed then it will skip hashing it.

Parameters:

algorithm - the name of the algorithm to be used

Method Detail

add

public void add(AddOperationContext addContext)
         throws org.apache.directory.api.ldap.model.exception.LdapException

Filters Partition#add( AddOperationContext ) call.

Specified by:

add in interface Interceptor

Overrides:

add in class BaseInterceptor

Parameters:

addContext - The AddOperationContext instance

Throws:

org.apache.directory.api.ldap.model.exception.LdapException - If we had some error while processing the Add operation

modify

public void modify(ModifyOperationContext modifyContext)
            throws org.apache.directory.api.ldap.model.exception.LdapException

Filters Partition#modify( ModifyOperationContext ) call.

Specified by:

modify in interface Interceptor

Overrides:

modify in class BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

includeHashedPassword

private org.apache.directory.api.ldap.model.entry.Attribute includeHashedPassword(org.apache.directory.api.ldap.model.entry.Attribute pwdAt)
                                                                           throws org.apache.directory.api.ldap.model.exception.LdapException

hash the password if it was not already hashed

Parameters:

pwdAt - the password attribute

Throws:

org.apache.directory.api.ldap.model.exception.LdapException