Search in sources :

Example 1 with JaasAuthenticationConfig

use of com.hazelcast.config.security.JaasAuthenticationConfig in project hazelcast by hazelcast.

the class SecureApplicationContextTest method testMemberRealm.

@Test
public void testMemberRealm() {
    RealmConfig realmConfig = securityConfig.getRealmConfig(securityConfig.getMemberRealm());
    JaasAuthenticationConfig jaasAuthenticationConfig = realmConfig.getJaasAuthenticationConfig();
    assertNotNull(jaasAuthenticationConfig);
    List<LoginModuleConfig> list = jaasAuthenticationConfig.getLoginModuleConfigs();
    assertEquals(1, list.size());
    LoginModuleConfig lm = list.get(0);
    assertEquals("com.hazelcast.examples.MyRequiredLoginModule", lm.getClassName());
    assertFalse(lm.getProperties().isEmpty());
    assertEquals(LoginModuleUsage.REQUIRED, lm.getUsage());
    CredentialsFactoryConfig credentialsFactoryConfig = realmConfig.getCredentialsFactoryConfig();
    assertNotNull(credentialsFactoryConfig);
    assertEquals(dummyCredentialsFactory, credentialsFactoryConfig.getImplementation());
}
Also used : RealmConfig(com.hazelcast.config.security.RealmConfig) CredentialsFactoryConfig(com.hazelcast.config.CredentialsFactoryConfig) LoginModuleConfig(com.hazelcast.config.LoginModuleConfig) JaasAuthenticationConfig(com.hazelcast.config.security.JaasAuthenticationConfig) QuickTest(com.hazelcast.test.annotation.QuickTest) Test(org.junit.Test)

Example 2 with JaasAuthenticationConfig

use of com.hazelcast.config.security.JaasAuthenticationConfig in project hazelcast by hazelcast.

the class YamlMemberDomConfigProcessor method handleJaasAuthentication.

@Override
protected void handleJaasAuthentication(RealmConfig realmConfig, Node node) {
    JaasAuthenticationConfig jaasAuthenticationConfig = new JaasAuthenticationConfig();
    for (Node child : childElements(node)) {
        jaasAuthenticationConfig.addLoginModuleConfig(handleLoginModule(child));
    }
    realmConfig.setJaasAuthenticationConfig(jaasAuthenticationConfig);
}
Also used : Node(org.w3c.dom.Node) YamlNode(com.hazelcast.internal.yaml.YamlNode) JaasAuthenticationConfig(com.hazelcast.config.security.JaasAuthenticationConfig)

Example 3 with JaasAuthenticationConfig

use of com.hazelcast.config.security.JaasAuthenticationConfig in project hazelcast by hazelcast.

the class AbstractDomConfigProcessor method handleJaasAuthentication.

protected void handleJaasAuthentication(RealmConfig realmConfig, Node node) {
    JaasAuthenticationConfig jaasAuthenticationConfig = new JaasAuthenticationConfig();
    for (Node child : childElements(node)) {
        String nodeName = cleanNodeName(child);
        if (matches("login-module", nodeName)) {
            jaasAuthenticationConfig.addLoginModuleConfig(handleLoginModule(child));
        }
    }
    realmConfig.setJaasAuthenticationConfig(jaasAuthenticationConfig);
}
Also used : Node(org.w3c.dom.Node) JaasAuthenticationConfig(com.hazelcast.config.security.JaasAuthenticationConfig)

Example 4 with JaasAuthenticationConfig

use of com.hazelcast.config.security.JaasAuthenticationConfig in project hazelcast by hazelcast.

the class ConfigXmlGeneratorTest method testSecurityConfig.

@Test
public void testSecurityConfig() {
    Config cfg = new Config();
    Properties dummyprops = new Properties();
    dummyprops.put("a", "b");
    RealmConfig memberRealm = new RealmConfig().setJaasAuthenticationConfig(new JaasAuthenticationConfig().setLoginModuleConfigs(Arrays.asList(new LoginModuleConfig().setClassName("member.f.o.o").setUsage(LoginModuleConfig.LoginModuleUsage.OPTIONAL), new LoginModuleConfig().setClassName("member.b.a.r").setUsage(LoginModuleConfig.LoginModuleUsage.SUFFICIENT), new LoginModuleConfig().setClassName("member.l.o.l").setUsage(LoginModuleConfig.LoginModuleUsage.REQUIRED)))).setCredentialsFactoryConfig(new CredentialsFactoryConfig().setClassName("foo.bar").setProperties(dummyprops));
    SecurityConfig expectedConfig = new SecurityConfig();
    expectedConfig.setEnabled(true).setOnJoinPermissionOperation(OnJoinPermissionOperationName.NONE).setClientBlockUnmappedActions(false).setClientRealmConfig("cr", new RealmConfig().setJaasAuthenticationConfig(new JaasAuthenticationConfig().setLoginModuleConfigs(Arrays.asList(new LoginModuleConfig().setClassName("f.o.o").setUsage(LoginModuleConfig.LoginModuleUsage.OPTIONAL), new LoginModuleConfig().setClassName("b.a.r").setUsage(LoginModuleConfig.LoginModuleUsage.SUFFICIENT), new LoginModuleConfig().setClassName("l.o.l").setUsage(LoginModuleConfig.LoginModuleUsage.REQUIRED)))).setUsernamePasswordIdentityConfig("username", "password")).setMemberRealmConfig("mr", memberRealm).setClientPermissionConfigs(new HashSet<>(asList(new PermissionConfig().setActions(newHashSet("read", "remove")).setEndpoints(newHashSet("127.0.0.1", "127.0.0.2")).setType(PermissionConfig.PermissionType.ATOMIC_LONG).setName("mycounter").setPrincipal("devos"), new PermissionConfig().setType(PermissionConfig.PermissionType.MANAGEMENT).setPrincipal("mcadmin"), new PermissionConfig().setType(PermissionConfig.PermissionType.CONFIG), new PermissionConfig().setActions(newHashSet("read", "create")).setType(PermissionConfig.PermissionType.REPLICATEDMAP).setName("rmap").setPrincipal("monitor"))));
    cfg.setSecurityConfig(expectedConfig);
    SecurityConfig actualConfig = getNewConfigViaXMLGenerator(cfg, false).getSecurityConfig();
    assertEquals(expectedConfig, actualConfig);
}
Also used : RealmConfig(com.hazelcast.config.security.RealmConfig) TlsAuthenticationConfig(com.hazelcast.config.security.TlsAuthenticationConfig) TokenIdentityConfig(com.hazelcast.config.security.TokenIdentityConfig) LdapAuthenticationConfig(com.hazelcast.config.security.LdapAuthenticationConfig) SemaphoreConfig(com.hazelcast.config.cp.SemaphoreConfig) CPSubsystemConfig(com.hazelcast.config.cp.CPSubsystemConfig) SimpleAuthenticationConfig(com.hazelcast.config.security.SimpleAuthenticationConfig) KerberosIdentityConfig(com.hazelcast.config.security.KerberosIdentityConfig) KerberosAuthenticationConfig(com.hazelcast.config.security.KerberosAuthenticationConfig) RealmConfig(com.hazelcast.config.security.RealmConfig) JaasAuthenticationConfig(com.hazelcast.config.security.JaasAuthenticationConfig) JetConfig(com.hazelcast.jet.config.JetConfig) FencedLockConfig(com.hazelcast.config.cp.FencedLockConfig) Properties(java.util.Properties) JaasAuthenticationConfig(com.hazelcast.config.security.JaasAuthenticationConfig) ParallelJVMTest(com.hazelcast.test.annotation.ParallelJVMTest) QuickTest(com.hazelcast.test.annotation.QuickTest) Test(org.junit.Test)

Example 5 with JaasAuthenticationConfig

use of com.hazelcast.config.security.JaasAuthenticationConfig in project hazelcast by hazelcast.

the class YamlClientDomConfigProcessor method handleJaasAuthentication.

@Override
protected void handleJaasAuthentication(RealmConfig realmConfig, Node node) {
    JaasAuthenticationConfig jaasAuthenticationConfig = new JaasAuthenticationConfig();
    for (Node child : childElements(node)) {
        jaasAuthenticationConfig.addLoginModuleConfig(handleLoginModule(child));
    }
    realmConfig.setJaasAuthenticationConfig(jaasAuthenticationConfig);
}
Also used : Node(org.w3c.dom.Node) JaasAuthenticationConfig(com.hazelcast.config.security.JaasAuthenticationConfig)

Aggregations

JaasAuthenticationConfig (com.hazelcast.config.security.JaasAuthenticationConfig)9 RealmConfig (com.hazelcast.config.security.RealmConfig)6 Test (org.junit.Test)6 LoginModuleConfig (com.hazelcast.config.LoginModuleConfig)5 QuickTest (com.hazelcast.test.annotation.QuickTest)5 Node (org.w3c.dom.Node)3 CredentialsFactoryConfig (com.hazelcast.config.CredentialsFactoryConfig)2 KerberosIdentityConfig (com.hazelcast.config.security.KerberosIdentityConfig)2 ParallelJVMTest (com.hazelcast.test.annotation.ParallelJVMTest)2 Properties (java.util.Properties)2 XMLConfigBuilderTest (com.hazelcast.config.XMLConfigBuilderTest)1 CPSubsystemConfig (com.hazelcast.config.cp.CPSubsystemConfig)1 FencedLockConfig (com.hazelcast.config.cp.FencedLockConfig)1 SemaphoreConfig (com.hazelcast.config.cp.SemaphoreConfig)1 KerberosAuthenticationConfig (com.hazelcast.config.security.KerberosAuthenticationConfig)1 LdapAuthenticationConfig (com.hazelcast.config.security.LdapAuthenticationConfig)1 SimpleAuthenticationConfig (com.hazelcast.config.security.SimpleAuthenticationConfig)1 TlsAuthenticationConfig (com.hazelcast.config.security.TlsAuthenticationConfig)1 TokenIdentityConfig (com.hazelcast.config.security.TokenIdentityConfig)1 YamlNode (com.hazelcast.internal.yaml.YamlNode)1