mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-06-30 18:15:39 +00:00
065fd29c52
15888: ETHREEOH-2617: CIFS Authenticators should not try to initialize when disabled
- removed init-method declaration from cifsAuthenticatorBase
15731: ENH-524: Use JobLockService to ensure that it is only possible for LDAP sync to run on one node at a time in a cluster
- Ensures that if schedule is identical on all nodes, the LDAP sync will only be run on one
15694: Fix TransactionServiceImplTest broken by 15685
15685: ETHREEOH-983: Move RepoServerMgmt JMX editable capabilities into a sysAdmin subsystem for more consistent control and cluster support
- New SysAdminParams interface exported by sysAdmin subsystem through which AuthenticationService and TransactionService get at the configured parameters
- The repository read only flag does not apply to the system user so that we can still persist changes to that flag through JMX!
- Removed sysAdminCache and supporting configuration.
15684: Improvements to cluster support for subsystems
- When a subsystem is stopped on a node for editing it is completely destroyed and deregistered from JMX on other nodes
- Should the subsystem be reactivated on those other nodes (e.g. called into by code) it will be reinitialized from persisted properties and thus stay in sync with the node being edited!
15683: Fixed potential concurrency issues in HeartBeat and LicenseComponent
- Discovered during cluster testing
- Because these components schedule triggers in a retrying transaction, they need to unschedule the triggers beforehand, just in case a retry has happened
15617: MOB-646: JMX edits now synchronized across cluster via JGroups
- When you stop a component or subsystem, it is stopped across the entire cluster
- When you restart it after editing properties, the component is reinitialized from the persisted properties across the cluster
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@16873 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
85 lines
2.9 KiB
Java
85 lines
2.9 KiB
Java
/*
|
|
* Copyright (C) 2005-2007 Alfresco Software Limited.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
* As a special exception to the terms and conditions of version 2.0 of
|
|
* the GPL, you may redistribute this Program in connection with Free/Libre
|
|
* and Open Source Software ("FLOSS") applications as described in Alfresco's
|
|
* FLOSS exception. You should have recieved a copy of the text describing
|
|
* the FLOSS exception, and it is also available here:
|
|
* http://www.alfresco.com/legal/licensing"
|
|
*/
|
|
package org.alfresco.repo.security.authentication;
|
|
|
|
import java.util.List;
|
|
import java.util.Set;
|
|
|
|
import org.alfresco.repo.admin.SysAdminParams;
|
|
import org.alfresco.service.cmr.security.AuthenticationService;
|
|
|
|
/**
|
|
* Common code for authentication services
|
|
*
|
|
* @author andyh
|
|
*/
|
|
public abstract class AbstractAuthenticationService implements AuthenticationService
|
|
{
|
|
private SysAdminParams sysAdminParams;
|
|
|
|
public void setSysAdminParams(SysAdminParams sysAdminParams)
|
|
{
|
|
this.sysAdminParams = sysAdminParams;
|
|
}
|
|
|
|
public void preAuthenticationCheck(String userName) throws AuthenticationException
|
|
{
|
|
if (sysAdminParams != null)
|
|
{
|
|
List<String> allowedUsers = sysAdminParams.getAllowedUserList();
|
|
|
|
if ((allowedUsers != null) && (!allowedUsers.contains(userName)))
|
|
{
|
|
throw new AuthenticationDisallowedException("Username not allowed: " + userName);
|
|
}
|
|
|
|
Integer maxUsers = (Integer) sysAdminParams.getMaxUsers();
|
|
|
|
if ((maxUsers != null) && (maxUsers != -1) && (getUsersWithTickets(true).size() >= maxUsers))
|
|
{
|
|
throw new AuthenticationMaxUsersException("Max users exceeded: " + maxUsers);
|
|
}
|
|
}
|
|
}
|
|
|
|
public List<String> getAllowedUsers()
|
|
{
|
|
return sysAdminParams.getAllowedUserList();
|
|
}
|
|
|
|
public int getMaxUsers()
|
|
{
|
|
return sysAdminParams.getMaxUsers();
|
|
}
|
|
|
|
public abstract Set<String> getUsersWithTickets(boolean nonExpiredOnly);
|
|
|
|
public abstract int invalidateTickets(boolean nonExpiredOnly);
|
|
|
|
public abstract int countTickets(boolean nonExpiredOnly);
|
|
|
|
public abstract Set<TicketComponent> getTicketComponents();
|
|
}
|