* failed to commit one folder in previous commit.
This commit is contained in:
Heng Sin Low
parent
f6865750c5
commit
388288425f
|
|
@ -0,0 +1,138 @@
|
||||||
|
/******************************************************************************
|
||||||
|
* Product: Adempiere ERP & CRM Smart Business Solution *
|
||||||
|
* Copyright (C) 2007 Adempiere, Inc. All Rights Reserved. *
|
||||||
|
* This program is free software; you can redistribute it and/or modify it *
|
||||||
|
* under the terms version 2 of the GNU General Public License as published *
|
||||||
|
* by the Free Software Foundation. This program is distributed in the hope *
|
||||||
|
* that it will be useful, but WITHOUT ANY WARRANTY; without even the implied *
|
||||||
|
* warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. *
|
||||||
|
* See the GNU General Public License for more details. *
|
||||||
|
* You should have received a copy of the GNU General Public License along *
|
||||||
|
* with this program; if not, write to the Free Software Foundation, Inc., *
|
||||||
|
* 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA. *
|
||||||
|
*
|
||||||
|
* Copyright (C) 2007 Low Heng Sin hengsin@avantz.com
|
||||||
|
* _____________________________________________
|
||||||
|
*****************************************************************************/
|
||||||
|
package org.adempiere.as.jboss;
|
||||||
|
|
||||||
|
import java.io.IOException;
|
||||||
|
import java.util.Map;
|
||||||
|
|
||||||
|
import javax.security.auth.Subject;
|
||||||
|
import javax.security.auth.callback.Callback;
|
||||||
|
import javax.security.auth.callback.CallbackHandler;
|
||||||
|
import javax.security.auth.callback.NameCallback;
|
||||||
|
import javax.security.auth.callback.PasswordCallback;
|
||||||
|
import javax.security.auth.callback.UnsupportedCallbackException;
|
||||||
|
import javax.security.auth.login.LoginException;
|
||||||
|
import javax.security.auth.spi.LoginModule;
|
||||||
|
|
||||||
|
import org.compiere.util.Env;
|
||||||
|
import org.compiere.util.KeyNamePair;
|
||||||
|
import org.compiere.util.Login;
|
||||||
|
import org.jboss.security.SimpleGroup;
|
||||||
|
import org.jboss.security.SimplePrincipal;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* JAAS login module for adempiere
|
||||||
|
* @author Low Heng Sin
|
||||||
|
*/
|
||||||
|
public class AdempiereLoginModule implements LoginModule {
|
||||||
|
|
||||||
|
private String unauthenticatedIdentity;
|
||||||
|
private CallbackHandler handler;
|
||||||
|
private Subject subject;
|
||||||
|
private KeyNamePair[] roles;
|
||||||
|
private String name;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* abort authentication process, reset state
|
||||||
|
*/
|
||||||
|
public boolean abort() throws LoginException {
|
||||||
|
roles = null;
|
||||||
|
name = null;
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* commit/complete the authentication project, add identity and roles to subject.
|
||||||
|
*/
|
||||||
|
public boolean commit() throws LoginException {
|
||||||
|
//note that jboss require all user role to be put under the group Roles
|
||||||
|
if (roles == null || roles.length == 0)
|
||||||
|
{
|
||||||
|
//not authenticated or authentication failed
|
||||||
|
subject.getPrincipals().add(new SimplePrincipal(unauthenticatedIdentity));
|
||||||
|
SimpleGroup roleGroup = new SimpleGroup("Roles");
|
||||||
|
subject.getPrincipals().add(roleGroup);
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
subject.getPrincipals().add(new SimplePrincipal(name));
|
||||||
|
SimpleGroup roleGroup = new SimpleGroup("Roles");
|
||||||
|
//fixed role use in ejb deployment descriptor
|
||||||
|
roleGroup.addMember(new SimplePrincipal("adempiereUsers"));
|
||||||
|
//dynamic role loaded from db, can be use with isCallerInRole for
|
||||||
|
//additional security check
|
||||||
|
for(int i = 0; i < roles.length; i++)
|
||||||
|
{
|
||||||
|
roleGroup.addMember(new SimplePrincipal(roles[i].getName()));
|
||||||
|
}
|
||||||
|
subject.getPrincipals().add(roleGroup);
|
||||||
|
}
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Initialize the login module, get options from configuration
|
||||||
|
*/
|
||||||
|
public void initialize(Subject subject, CallbackHandler callbackHandler,
|
||||||
|
Map<String, ?> sharedState, Map<String, ?> options) {
|
||||||
|
unauthenticatedIdentity = (String)options.get("unauthenticatedIdentity");
|
||||||
|
handler = callbackHandler;
|
||||||
|
this.subject = subject;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Perform login process
|
||||||
|
*/
|
||||||
|
public boolean login() throws LoginException {
|
||||||
|
//get username and password from standard callback
|
||||||
|
Callback callbacks[] = new Callback[]{new NameCallback("Login:"), new PasswordCallback("Password:", false)};
|
||||||
|
try {
|
||||||
|
handler.handle(callbacks);
|
||||||
|
} catch (IOException e) {
|
||||||
|
} catch (UnsupportedCallbackException e) {
|
||||||
|
}
|
||||||
|
name = ((NameCallback)callbacks[0]).getName();
|
||||||
|
char[] pass = ((PasswordCallback)callbacks[1]).getPassword();
|
||||||
|
String passwd = pass != null ? new String(pass) : null;
|
||||||
|
|
||||||
|
//do authentication
|
||||||
|
if (name != null && passwd != null)
|
||||||
|
{
|
||||||
|
//perform db authentication
|
||||||
|
Login login = new Login(Env.getCtx());
|
||||||
|
roles = login.getRoles(name, passwd);
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
//no username or password
|
||||||
|
roles = null;
|
||||||
|
}
|
||||||
|
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* logout, reset state
|
||||||
|
*/
|
||||||
|
public boolean logout() throws LoginException {
|
||||||
|
roles = null;
|
||||||
|
name = null;
|
||||||
|
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,71 @@
|
||||||
|
/******************************************************************************
|
||||||
|
* Copyright (C) 2008 Low Heng Sin *
|
||||||
|
* This program is free software; you can redistribute it and/or modify it *
|
||||||
|
* under the terms version 2 of the GNU General Public License as published *
|
||||||
|
* by the Free Software Foundation. This program is distributed in the hope *
|
||||||
|
* that it will be useful, but WITHOUT ANY WARRANTY; without even the implied *
|
||||||
|
* warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. *
|
||||||
|
* See the GNU General Public License for more details. *
|
||||||
|
* You should have received a copy of the GNU General Public License along *
|
||||||
|
* with this program; if not, write to the Free Software Foundation, Inc., *
|
||||||
|
* 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA. *
|
||||||
|
*****************************************************************************/
|
||||||
|
package org.adempiere.as.jboss;
|
||||||
|
|
||||||
|
import java.util.Hashtable;
|
||||||
|
|
||||||
|
import javax.naming.Context;
|
||||||
|
|
||||||
|
import org.adempiere.as.IApplicationServer;
|
||||||
|
|
||||||
|
/**
|
||||||
|
*
|
||||||
|
* @author Low Heng Sin
|
||||||
|
*
|
||||||
|
*/
|
||||||
|
public class JBoss implements IApplicationServer {
|
||||||
|
|
||||||
|
//ensure client library is installed
|
||||||
|
static {
|
||||||
|
try {
|
||||||
|
Class.forName("org.jboss.security.jndi.JndiLoginInitialContextFactory");
|
||||||
|
} catch (ClassNotFoundException e) {
|
||||||
|
throw new IllegalStateException(e);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @see IApplicationServer#getInitialContextEnvironment(String, int, String, String)
|
||||||
|
*/
|
||||||
|
public Hashtable<String, String> getInitialContextEnvironment(
|
||||||
|
String AppsHost, int AppsPort, String principal, String credential) {
|
||||||
|
Hashtable<String,String> env = new Hashtable<String,String>();
|
||||||
|
String connect = AppsHost;
|
||||||
|
if (AppsHost.indexOf("://") == -1)
|
||||||
|
connect = "jnp://" + AppsHost + ":" + AppsPort;
|
||||||
|
env.put (Context.PROVIDER_URL, connect);
|
||||||
|
env.put (Context.URL_PKG_PREFIXES, "org.jboss.naming.client");
|
||||||
|
// HTTP - default timeout 0
|
||||||
|
env.put (org.jnp.interfaces.TimedSocketFactory.JNP_TIMEOUT, "5000"); // timeout in ms
|
||||||
|
env.put (org.jnp.interfaces.TimedSocketFactory.JNP_SO_TIMEOUT, "5000");
|
||||||
|
// JNP - default timeout 5 sec
|
||||||
|
env.put(org.jnp.interfaces.NamingContext.JNP_DISCOVERY_TIMEOUT, "5000");
|
||||||
|
|
||||||
|
if (principal != null && credential != null)
|
||||||
|
{
|
||||||
|
env.put(Context.INITIAL_CONTEXT_FACTORY,"org.jboss.security.jndi.JndiLoginInitialContextFactory");
|
||||||
|
env.put(Context.SECURITY_PRINCIPAL, principal);
|
||||||
|
env.put(Context.SECURITY_CREDENTIALS, credential);
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
env.put (Context.INITIAL_CONTEXT_FACTORY,"org.jnp.interfaces.NamingContextFactory");
|
||||||
|
}
|
||||||
|
|
||||||
|
return env;
|
||||||
|
}
|
||||||
|
|
||||||
|
public int getDefaultNamingServicePort() {
|
||||||
|
return 1099;
|
||||||
|
}
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue