org.ow2.proactive.authentication

Class FileLoginModule

java.lang.Object

org.ow2.proactive.authentication.FileLoginModule

All Implemented Interfaces:

LoginModule, Loggable

Direct Known Subclasses:

LDAPLoginModule, PAMLoginModule

public abstract class FileLoginModule
extends Object
implements Loggable, LoginModule

Authentication based on user and group file.

Since:

ProActive Scheduling 0.9.1

Field Summary

Fields

Modifier and Type	Field and Description
protected CallbackHandler	callbackHandler JAAS call back handler used to get authentication request parameters
static String	ENCRYPTED_DATA_SEP
protected String	groupFile The file where to store group management
protected String	loginFile The file where to store the allowed user//password
protected Subject	subject

Constructor Summary

Constructors

Constructor and Description
FileLoginModule()

Method Summary

Modifier and Type	Method and Description
boolean	abort()
protected void	checkGroupFile()
protected void	checkLoginFile()
boolean	commit()
protected abstract String	getGroupFileName() Defines group file name
protected abstract String	getLoginFileName() Defines login file name
protected abstract PrivateKey	getPrivateKey() Defines private key
protected void	groupMembershipFromFile(String username) Return corresponding group for an user from the group file.
void	initialize(Subject subject, CallbackHandler callbackHandler, Map<String,?> sharedState, Map<String,?> options)
boolean	login()
boolean	logout()
protected boolean	logUser(String username, String password, boolean printErrorMessage) First Check user and password from login file.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.ow2.proactive.authentication.Loggable

getLogger

Field Detail

ENCRYPTED_DATA_SEP

public static final String ENCRYPTED_DATA_SEP

See Also:

Constant Field Values

callbackHandler

protected CallbackHandler callbackHandler

JAAS call back handler used to get authentication request parameters

loginFile

protected String loginFile

The file where to store the allowed user//password

groupFile

protected String groupFile

The file where to store group management

subject

protected Subject subject

Constructor Detail

FileLoginModule

public FileLoginModule()

Method Detail

getLoginFileName

protected abstract String getLoginFileName()

Defines login file name

Returns:

the login file name

getGroupFileName

protected abstract String getGroupFileName()

Defines group file name

Returns:

the group file name

getPrivateKey

protected abstract PrivateKey getPrivateKey()
                                     throws KeyException

Defines private key

Returns:

private key in use

Throws:

KeyException

initialize

public void initialize(Subject subject,
                       CallbackHandler callbackHandler,
                       Map<String,?> sharedState,
                       Map<String,?> options)

Specified by:

initialize in interface LoginModule

See Also:

LoginModule.initialize(javax.security.auth.Subject, javax.security.auth.callback.CallbackHandler, java.util.Map, java.util.Map)

checkLoginFile

protected void checkLoginFile()

checkGroupFile

protected void checkGroupFile()

login

public boolean login()
              throws LoginException

Specified by:

login in interface LoginModule

Throws:

LoginException - if userName of password are not correct

See Also:

LoginModule.login()

logUser

protected boolean logUser(String username,
                          String password,
                          boolean printErrorMessage)
                   throws LoginException

First Check user and password from login file. If user is authenticated, check group membership from group file.

Parameters:

username - user's login

password - user's password

printErrorMessage - if a message should be printed if the password is incorrect.

Returns:

true user login and password are correct, and requested group is authorized for the user

Throws:

LoginException - if authentication or group membership fails.

groupMembershipFromFile

protected void groupMembershipFromFile(String username)
                                throws LoginException

Return corresponding group for an user from the group file.

Parameters:

username - user's login

Throws:

LoginException - if group file is not found or unreadable.

commit

public boolean commit()
               throws LoginException

Specified by:

commit in interface LoginModule

Throws:

LoginException

See Also:

LoginModule.commit()

abort

public boolean abort()
              throws LoginException

Specified by:

abort in interface LoginModule

Throws:

LoginException

See Also:

LoginModule.abort()

logout

public boolean logout()
               throws LoginException

Specified by:

logout in interface LoginModule

Throws:

LoginException

See Also:

LoginModule.logout()