mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-07-24 17:32:48 +00:00
Merged enterprise features
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@2746 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Paul Holmes-Higgin
@@ -0,0 +1,209 @@
|
||||
/*
|
||||
* Copyright (C) 2005 Alfresco, Inc.
|
||||
*
|
||||
* Licensed under the Alfresco Network License. You may obtain a
|
||||
* copy of the License at
|
||||
*
|
||||
* http://www.alfrescosoftware.com/legal/
|
||||
*
|
||||
* Please view the license relevant to your network subscription.
|
||||
*
|
||||
* BY CLICKING THE "I UNDERSTAND AND ACCEPT" BOX, OR INSTALLING,
|
||||
* READING OR USING ALFRESCO'S Network SOFTWARE (THE "SOFTWARE"),
|
||||
* YOU ARE AGREEING ON BEHALF OF THE ENTITY LICENSING THE SOFTWARE
|
||||
* ("COMPANY") THAT COMPANY WILL BE BOUND BY AND IS BECOMING A PARTY TO
|
||||
* THIS ALFRESCO NETWORK AGREEMENT ("AGREEMENT") AND THAT YOU HAVE THE
|
||||
* AUTHORITY TO BIND COMPANY. IF COMPANY DOES NOT AGREE TO ALL OF THE
|
||||
* TERMS OF THIS AGREEMENT, DO NOT SELECT THE "I UNDERSTAND AND AGREE"
|
||||
* BOX AND DO NOT INSTALL THE SOFTWARE OR VIEW THE SOURCE CODE. COMPANY
|
||||
* HAS NOT BECOME A LICENSEE OF, AND IS NOT AUTHORIZED TO USE THE
|
||||
* SOFTWARE UNLESS AND UNTIL IT HAS AGREED TO BE BOUND BY THESE LICENSE
|
||||
* TERMS. THE "EFFECTIVE DATE" FOR THIS AGREEMENT SHALL BE THE DAY YOU
|
||||
* CHECK THE "I UNDERSTAND AND ACCEPT" BOX.
|
||||
*/
|
||||
package org.alfresco.repo.security.authentication.jaas;
|
||||
|
||||
import java.io.IOException;
|
||||
|
||||
import javax.security.auth.callback.Callback;
|
||||
import javax.security.auth.callback.CallbackHandler;
|
||||
import javax.security.auth.callback.LanguageCallback;
|
||||
import javax.security.auth.callback.NameCallback;
|
||||
import javax.security.auth.callback.PasswordCallback;
|
||||
import javax.security.auth.callback.UnsupportedCallbackException;
|
||||
import javax.security.auth.login.LoginContext;
|
||||
import javax.security.auth.login.LoginException;
|
||||
import javax.security.sasl.AuthorizeCallback;
|
||||
import javax.security.sasl.RealmCallback;
|
||||
|
||||
import org.alfresco.i18n.I18NUtil;
|
||||
import org.alfresco.repo.security.authentication.AbstractAuthenticationComponent;
|
||||
import org.alfresco.repo.security.authentication.AuthenticationException;
|
||||
|
||||
/**
|
||||
* JAAS based authentication
|
||||
*
|
||||
* The user name and password are picked up from login.
|
||||
*
|
||||
* The other configurable parameters are:
|
||||
* realm - the authentication realm if required,
|
||||
* and the entry name to use from the login context.
|
||||
*
|
||||
* You will need to be familiar with the JAAS authentication process to set this up.
|
||||
*
|
||||
* In summary you will need to configure java.security (in the lib/security directory of the jre you are using)
|
||||
* to find a jaas configuration.
|
||||
*
|
||||
* This entry could be used if you want to put the login configuration in the same place (in the lib/security directory of the jre you are using)
|
||||
*
|
||||
* <code>
|
||||
* login.config.url.1=file:${java.home}/lib/security/java.login.config
|
||||
* </code>
|
||||
*
|
||||
* Example configuration entries for Kerberos would be:
|
||||
*
|
||||
* <code>
|
||||
* Alfresco {
|
||||
* com.sun.security.auth.module.Krb5LoginModule sufficient;
|
||||
* };
|
||||
*
|
||||
* com.sun.net.ssl.client {
|
||||
* com.sun.security.auth.module.Krb5LoginModule sufficient;
|
||||
* };
|
||||
*
|
||||
* other {
|
||||
* com.sun.security.auth.module.Krb5LoginModule sufficient;
|
||||
* };
|
||||
* </code>
|
||||
*
|
||||
* This sets up authentication using Kerberos for Alfresco and some defaults that would use the same mechanism if sasl failed for example.
|
||||
*
|
||||
* You could use kerberos and LDAP combined against an Active Directory server.
|
||||
*
|
||||
* @author Andy Hind
|
||||
*/
|
||||
public class JAASAuthenticationComponent extends AbstractAuthenticationComponent
|
||||
{
|
||||
|
||||
/**
|
||||
* A key into the login config that defines the authentication mechamisms required.
|
||||
*/
|
||||
private String jaasConfigEntryName = "Alfresco";
|
||||
|
||||
/**
|
||||
* A default realm
|
||||
*/
|
||||
private String realm = null;
|
||||
|
||||
public JAASAuthenticationComponent()
|
||||
{
|
||||
super();
|
||||
}
|
||||
|
||||
// Springification
|
||||
|
||||
public void setJaasConfigEntryName(String jaasConfigEntryName)
|
||||
{
|
||||
this.jaasConfigEntryName = jaasConfigEntryName;
|
||||
}
|
||||
|
||||
|
||||
public void setRealm(String realm)
|
||||
{
|
||||
this.realm = realm;
|
||||
}
|
||||
|
||||
/**
|
||||
* Jaas does not support guest login
|
||||
*/
|
||||
@Override
|
||||
protected boolean implementationAllowsGuestLogin()
|
||||
{
|
||||
return false;
|
||||
}
|
||||
|
||||
/**
|
||||
* Implement Authentication
|
||||
*/
|
||||
public void authenticate(String userName, char[] password) throws AuthenticationException
|
||||
{
|
||||
|
||||
LoginContext lc;
|
||||
try
|
||||
{
|
||||
lc = new LoginContext(jaasConfigEntryName, new SimpleCallback(userName, realm, password));
|
||||
}
|
||||
catch (LoginException e)
|
||||
{
|
||||
throw new AuthenticationException("Login Failed", e);
|
||||
}
|
||||
try
|
||||
{
|
||||
lc.login();
|
||||
// Login has gone through OK, set up the acegi context
|
||||
setCurrentUser(userName);
|
||||
}
|
||||
catch (LoginException e)
|
||||
{
|
||||
throw new AuthenticationException("Login Failed", e);
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
/**
|
||||
* Simple call back class to support the common requirements.
|
||||
*
|
||||
* @author Andy Hind
|
||||
*/
|
||||
private static class SimpleCallback implements CallbackHandler
|
||||
{
|
||||
String userName;
|
||||
|
||||
String realm;
|
||||
|
||||
char[] password;
|
||||
|
||||
SimpleCallback(String userName, String realm, char[] password)
|
||||
{
|
||||
this.userName = userName;
|
||||
this.realm = realm;
|
||||
this.password = password;
|
||||
}
|
||||
|
||||
public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException
|
||||
{
|
||||
for (int i = 0; i < callbacks.length; i++)
|
||||
{
|
||||
if (callbacks[i] instanceof AuthorizeCallback)
|
||||
{
|
||||
AuthorizeCallback cb = (AuthorizeCallback) callbacks[i];
|
||||
cb.setAuthorized(false);
|
||||
}
|
||||
else if (callbacks[i] instanceof LanguageCallback)
|
||||
{
|
||||
LanguageCallback cb = (LanguageCallback) callbacks[i];
|
||||
cb.setLocale(I18NUtil.getLocale());
|
||||
}
|
||||
else if (callbacks[i] instanceof NameCallback)
|
||||
{
|
||||
NameCallback cb = (NameCallback) callbacks[i];
|
||||
cb.setName(userName);
|
||||
}
|
||||
else if (callbacks[i] instanceof PasswordCallback)
|
||||
{
|
||||
PasswordCallback cb = (PasswordCallback) callbacks[i];
|
||||
cb.setPassword(password);
|
||||
}
|
||||
else if (callbacks[i] instanceof RealmCallback)
|
||||
{
|
||||
RealmCallback cb = (RealmCallback) callbacks[i];
|
||||
cb.setText(realm);
|
||||
}
|
||||
else
|
||||
{
|
||||
throw new UnsupportedCallbackException(callbacks[i]);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user