org.opennms.web.springframework.security

Class KerberosLdapAuthenticationProvider

java.lang.Object

org.springframework.security.kerberos.authentication.KerberosAuthenticationProvider

org.opennms.web.springframework.security.KerberosLdapAuthenticationProvider

All Implemented Interfaces:

org.springframework.security.authentication.AuthenticationProvider

public class KerberosLdapAuthenticationProvider
extends org.springframework.security.kerberos.authentication.KerberosAuthenticationProvider

Authentication provider which validates users via Kerberos credentials and then populates the users' authorities using the specified implementation of LdapAuthoritiesPopulator. Created for use cases where no existing UserDetailsService implementation will quite do the job.

Author:

Jeff Gehlbach

See Also:

KerberosServiceLdapAuthenticationProvider, KerberosServiceAuthenticationProvider, LdapUserSearch, LdapAuthoritiesPopulator

Constructor Summary

Constructors

Constructor and Description
KerberosLdapAuthenticationProvider()

Method Summary

Methods

Modifier and Type	Method and Description
org.springframework.security.core.Authentication	authenticate(org.springframework.security.core.Authentication authentication)
org.springframework.security.kerberos.authentication.KerberosClient	getKerberosClient()
org.springframework.security.ldap.userdetails.LdapAuthoritiesPopulator	getLdapAuthoritiesPopulator()
org.springframework.security.ldap.search.LdapUserSearch	getLdapUserSearch()
boolean	getTrimRealm()
void	setKerberosClient(org.springframework.security.kerberos.authentication.KerberosClient kerberosClient)
void	setLdapAuthoritiesPopulator(org.springframework.security.ldap.userdetails.LdapAuthoritiesPopulator ldapAuthoritiesPopulator)
void	setLdapUserSearch(org.springframework.security.ldap.search.LdapUserSearch ldapUserSearch)
void	setTrimRealm(boolean trimRealm)

Methods inherited from class org.springframework.security.kerberos.authentication.KerberosAuthenticationProvider

setUserDetailsService, supports

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KerberosLdapAuthenticationProvider

public KerberosLdapAuthenticationProvider()

Method Detail

authenticate

public org.springframework.security.core.Authentication authenticate(org.springframework.security.core.Authentication authentication)
                                                              throws org.springframework.security.core.AuthenticationException

Specified by:

authenticate in interface org.springframework.security.authentication.AuthenticationProvider

Overrides:

authenticate in class org.springframework.security.kerberos.authentication.KerberosAuthenticationProvider

Throws:

org.springframework.security.core.AuthenticationException

setLdapAuthoritiesPopulator

public void setLdapAuthoritiesPopulator(org.springframework.security.ldap.userdetails.LdapAuthoritiesPopulator ldapAuthoritiesPopulator)

Parameters:

ldapAuthoritiesPopulator - The LdapAuthoritiesPopulator to use for retrieving granted authorities from an LDAP directory

getLdapAuthoritiesPopulator

public org.springframework.security.ldap.userdetails.LdapAuthoritiesPopulator getLdapAuthoritiesPopulator()

setLdapUserSearch

public void setLdapUserSearch(org.springframework.security.ldap.search.LdapUserSearch ldapUserSearch)

Parameters:

ldapUserSearch - The LdapUserSearch with which to look up users in an LDAP directory

getLdapUserSearch

public org.springframework.security.ldap.search.LdapUserSearch getLdapUserSearch()

setKerberosClient

public void setKerberosClient(org.springframework.security.kerberos.authentication.KerberosClient kerberosClient)

Overrides:

setKerberosClient in class org.springframework.security.kerberos.authentication.KerberosAuthenticationProvider

getKerberosClient

public org.springframework.security.kerberos.authentication.KerberosClient getKerberosClient()

setTrimRealm

public void setTrimRealm(boolean trimRealm)

Parameters:

trimRealm - Defaults to true. If set to false, do not trim the realm portion (e.g. @EXAMPLE.ORG) from the authenticated user principal name (e.g. user@EXAMPLE.ORG).

getTrimRealm

public boolean getTrimRealm()