Java GSSContext.getSrcName方法代码示例

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public Principal authenticate(GSSContext gssContext, boolean storeCreds) {
    if (gssContext.isEstablished()) {
        String username = null;
        GSSName name = null;
        try {
            name = gssContext.getSrcName();
        } catch (GSSException e) {
            log.warn(sm.getString("realmBase.gssNameFail"), e);
            return null;
        }
        
        username = name.toString();
        
        Principal authenticatedUser = super.authenticate(gssContext, storeCreds);
            
        return filterLockedAccounts(username, authenticatedUser);
    }
    
    // Fail in all other cases
    return null;
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public Principal authenticate(GSSContext gssContext, boolean storeCreds) {
	if (gssContext.isEstablished()) {
		String username = null;
		GSSName name = null;
		try {
			name = gssContext.getSrcName();
		} catch (GSSException e) {
			log.warn(sm.getString("realmBase.gssNameFail"), e);
			return null;
		}

		username = name.toString();

		Principal authenticatedUser = super.authenticate(gssContext, storeCreds);

		return filterLockedAccounts(username, authenticatedUser);
	}

	// Fail in all other cases
	return null;
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
private static String getUsernameFromGSSContext(final GSSContext gssContext, final boolean strip, final ESLogger logger) {
    if (gssContext.isEstablished()) {
        GSSName gssName = null;
        try {
            gssName = gssContext.getSrcName();
        } catch (final GSSException e) {
            logger.error("Unable to get src name from gss context", e);
        }

        if (gssName != null) {
            String name = gssName.toString();

            return stripRealmName(name, strip);

        }
    }

    return null;
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
/**
 * Performs host authentication. The hostname of the peer is
 * compared with the hostname specified in the peer's (topmost) 
 * certificate in the certificate chain. The hostnames must
 * match exactly (in case-insensitive way)
 *
 * @param context the security context
 * @param host host address of the peer.
 * @exception AuthorizationException if the hostnames
 *            do not match.
 */
public void authorize(GSSContext context, String host)
    throws AuthorizationException {
    logger.debug("Authorization: HOST");

    try {
        GSSName expected = getExpectedName(null, host);
    
        GSSName target = null;
        if (context.isInitiator()) {
            target = context.getTargName();
        } else {
            target = context.getSrcName();
        }
    
        if (!expected.equals(target)) {
            generateAuthorizationException(expected, target);
        }
    } catch (GSSException e) {
        throw new AuthorizationException("Authorization failure", e);
    }
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
/**
    * Performs self authorization.
    */
   public void authorize(GSSContext context, String host)
throws AuthorizationException {
logger.debug("Authorization: SELF");

try {
    if (!context.getSrcName().equals(context.getTargName())) {
	GSSName expected = null;
	GSSName target = null;
	if (context.isInitiator()) {
	    expected = context.getSrcName();
	    target = context.getTargName();
	} else {
	    expected = context.getTargName();
	    target = context.getSrcName();
	}
	generateAuthorizationException(expected, target);
    }
} catch (GSSException e) {
    throw new AuthorizationException("Authorization failure", e);
}
   }
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
/**
 * Performs identity authorization. The given identity is compared
 * with the peer's identity.
 *
 * @param context the security context
 * @param host host address of the peer.
 * @exception AuthorizationException if the peer's
 *            identity does not match the expected identity.
 */
public void authorize(GSSContext context, String host)
    throws AuthorizationException {
    logger.debug("Authorization: IDENTITY");

    try {
        GSSName expected = getExpectedName(null, host);
    
        GSSName target = null;
        if (context.isInitiator()) {
            target = context.getTargName();
        } else {
            target = context.getSrcName();
        }
        
        if (!expected.equals(target)) {
            generateAuthorizationException(expected, target);
        }
    } catch (GSSException e) {
        throw new AuthorizationException("Authorization failure", e);
    }
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
public GSSAuthentication(byte[] token) throws GSSException {
	GSSManager gssManager = GSSManager.getInstance();
	GSSCredential gssCreds = gssManager.createCredential(
			(GSSName) null, GSSCredential.INDEFINITE_LIFETIME,
			(Oid) null, GSSCredential.ACCEPT_ONLY);
	GSSContext gssContext = gssManager.createContext(gssCreds);

	responseToken = gssContext
			.acceptSecContext(token, 0, token.length);

	if (gssContext.isEstablished()) {
		GSSName name = gssContext.getSrcName();
		username = name.toString();
	}
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
private String getUsernameFromGSSContext(final GSSContext gssContext, final boolean strip) {
    if (gssContext.isEstablished()) {
        GSSName gssName = null;
        try {
            gssName = gssContext.getSrcName();
        } catch (final GSSException e) {
            log.warn("realmBase.gssNameFail", e);
        }

        if (gssName != null) {
            String name = gssName.toString();

            if (strip && name != null) {
                final int i = name.indexOf('@');
                if (i > 0) {
                    // Zero so we don;t leave a zero length name
                    name = name.substring(0, i);
                }
            }

            return name;

        }
    }

    return null;
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public Principal authenticate(GSSContext gssContext, boolean storeCreds) {
    if (gssContext.isEstablished()) {
        String username = null;
        GSSName name = null;
        try {
            name = gssContext.getSrcName();
        } catch (GSSException e) {
            log.warn(sm.getString("realmBase.gssNameFail"), e);
            return null;
        }
        
        username = name.toString();
        
        if (isLocked(username)) {
            // Trying to authenticate a locked user is an automatic failure
            registerAuthFailure(username);
            
            log.warn(sm.getString("lockOutRealm.authLockedUser", username));
            return null;
        }

        Principal authenticatedUser =
                super.authenticate(gssContext, storeCreds);
        
        if (authenticatedUser == null) {
            registerAuthFailure(username);
        } else {
            registerAuthSuccess(username);
        }
        return authenticatedUser;
    }
    
    // Fail in all other cases
    return null;
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
private String getKerberosUser()
{
    log.debug("Obtaining userID from kerberos");
    String service = conSettings.getSaslProtocol() + "@" + conSettings.getSaslServerName();
    GSSManager manager = GSSManager.getInstance();

    try
    {
        GSSName acceptorName = manager.createName(service,
            GSSName.NT_HOSTBASED_SERVICE, KRB5_OID);

        GSSContext secCtx = manager.createContext(acceptorName,
                                                  KRB5_OID,
                                                  null,
                                                  GSSContext.INDEFINITE_LIFETIME);

        secCtx.initSecContext(new byte[0], 0, 1);

        if (secCtx.getSrcName() != null)
        {
            return secCtx.getSrcName().toString();
        }

    }
    catch (GSSException e)
    {
        log.warn("Unable to retrieve userID from Kerberos due to error",e);
    }

    return null;
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public Principal authenticate(GSSContext gssContext, boolean storeCreds) {
    if (gssContext.isEstablished()) {
        Principal authenticatedUser = null;
        String username = null;
        
        GSSName name = null;
        try {
            name = gssContext.getSrcName();
        } catch (GSSException e) {
            log.warn(sm.getString("realmBase.gssNameFail"), e);
            return null;
        }
        
        username = name.toString();

        for (Realm realm : realms) {
            if (log.isDebugEnabled()) {
                log.debug(sm.getString("combinedRealm.authStart",
                        username, realm.getInfo()));
            }

            authenticatedUser = realm.authenticate(gssContext, storeCreds);

            if (authenticatedUser == null) {
                if (log.isDebugEnabled()) {
                    log.debug(sm.getString("combinedRealm.authFail",
                            username, realm.getInfo()));
                }
            } else {
                if (log.isDebugEnabled()) {
                    log.debug(sm.getString("combinedRealm.authSuccess",
                            username, realm.getInfo()));
                }
                break;
            }
        }
        return authenticatedUser;
    }
    
    // Fail in all other cases
    return null;
}
 

import org.ietf.jgss.GSSContext; //导入方法依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public Principal authenticate(GSSContext gssContext, boolean storeCreds) {
	if (gssContext.isEstablished()) {
		Principal authenticatedUser = null;
		String username = null;

		GSSName name = null;
		try {
			name = gssContext.getSrcName();
		} catch (GSSException e) {
			log.warn(sm.getString("realmBase.gssNameFail"), e);
			return null;
		}

		username = name.toString();

		for (Realm realm : realms) {
			if (log.isDebugEnabled()) {
				log.debug(sm.getString("combinedRealm.authStart", username, realm.getInfo()));
			}

			authenticatedUser = realm.authenticate(gssContext, storeCreds);

			if (authenticatedUser == null) {
				if (log.isDebugEnabled()) {
					log.debug(sm.getString("combinedRealm.authFail", username, realm.getInfo()));
				}
			} else {
				if (log.isDebugEnabled()) {
					log.debug(sm.getString("combinedRealm.authSuccess", username, realm.getInfo()));
				}
				break;
			}
		}
		return authenticatedUser;
	}

	// Fail in all other cases
	return null;
}