Examples with LdapName javax.naming.ldap.LdapName used on opensource projects

Example 81 with LdapName

use of javax.naming.ldap.LdapName in project druid by druid-io.

the class LDAPRoleProvider method getGroupsFromLdap.

Set<LdapName> getGroupsFromLdap(SearchResult userResult) throws NamingException {
    Set<LdapName> groups = new TreeSet<>();
    Attribute memberOf = userResult.getAttributes().get("memberOf");
    if (memberOf == null) {
        LOG.debug("No memberOf attributes");
        // not part of any groups
        return groups;
    }
    for (int i = 0; i < memberOf.size(); i++) {
        String memberDn = memberOf.get(i).toString();
        LdapName ln;
        try {
            ln = new LdapName(memberDn);
        } catch (InvalidNameException e) {
            LOG.debug("Invalid LDAP name: %s", memberDn);
            continue;
        }
        if (this.groupFilters != null) {
            if (allowedLdapGroup(ln, new TreeSet<>(Arrays.asList(this.groupFilters)))) {
                groups.add(ln);
            }
        } else {
            groups.add(ln);
        }
    }
    return groups;
}

Example 82 with LdapName

use of javax.naming.ldap.LdapName in project SSM by Intel-bigdata.

the class LdapRealm method addRoleIfMember.

private void addRoleIfMember(final String userDn, final SearchResult group, final Set<String> roleNames, final Set<String> groupNames, final LdapContextFactory ldapContextFactory) throws NamingException {
    NamingEnumeration<? extends Attribute> attributeEnum = null;
    NamingEnumeration<?> ne = null;
    try {
        LdapName userLdapDn = new LdapName(userDn);
        Attribute attribute = group.getAttributes().get(getGroupIdAttribute());
        String groupName = attribute.get().toString();
        attributeEnum = group.getAttributes().getAll();
        while (attributeEnum.hasMore()) {
            final Attribute attr = attributeEnum.next();
            if (!memberAttribute.equalsIgnoreCase(attr.getID())) {
                continue;
            }
            ne = attr.getAll();
            while (ne.hasMore()) {
                String attrValue = ne.next().toString();
                if (memberAttribute.equalsIgnoreCase(MEMBER_URL)) {
                    boolean dynamicGroupMember = isUserMemberOfDynamicGroup(userLdapDn, attrValue, ldapContextFactory);
                    if (dynamicGroupMember) {
                        groupNames.add(groupName);
                        String roleName = roleNameFor(groupName);
                        if (roleName != null) {
                            roleNames.add(roleName);
                        } else {
                            roleNames.add(groupName);
                        }
                    }
                } else {
                    if (groupObjectClass.equalsIgnoreCase(POSIX_GROUP)) {
                        attrValue = memberAttributeValuePrefix + attrValue + memberAttributeValueSuffix;
                    }
                    if (userLdapDn.equals(new LdapName(attrValue))) {
                        groupNames.add(groupName);
                        String roleName = roleNameFor(groupName);
                        if (roleName != null) {
                            roleNames.add(roleName);
                        } else {
                            roleNames.add(groupName);
                        }
                        break;
                    }
                }
            }
        }
    } finally {
        try {
            if (attributeEnum != null) {
                attributeEnum.close();
            }
        } finally {
            if (ne != null) {
                ne.close();
            }
        }
    }
}

Example 83 with LdapName

use of javax.naming.ldap.LdapName in project vert.x by eclipse.

the class KeyStoreHelper method getX509CertificateCommonNames.

public static List<String> getX509CertificateCommonNames(String dn) throws Exception {
    List<String> names = new ArrayList<>();
    if (!PlatformDependent.isAndroid()) {
        LdapName ldapDN = new LdapName(dn);
        for (Rdn rdn : ldapDN.getRdns()) {
            if (rdn.getType().equalsIgnoreCase("cn")) {
                String name = rdn.getValue().toString();
                names.add(name);
            }
        }
    } else {
        String[] rdns = dn.trim().split("[,;]");
        for (String rdn : rdns) {
            String[] nvp = rdn.trim().split("=");
            if (nvp.length == 2 && "cn".equalsIgnoreCase(nvp[0])) {
                names.add(nvp[1]);
            }
        }
    }
    return names;
}

Example 84 with LdapName

use of javax.naming.ldap.LdapName in project zm-mailbox by Zimbra.

the class CertUtil method getSubjectAttr.

private String getSubjectAttr(String needAttrName, String needAttrOid) {
    String subjectDN = getSubjectDN();
    try {
        LdapName dn = new LdapName(subjectDN);
        List<Rdn> rdns = dn.getRdns();
        for (Rdn rdn : rdns) {
            String type = rdn.getType();
            boolean isOid = type.contains(".");
            boolean matched = (isOid ? type.equals(needAttrOid) : type.equals(needAttrName));
            if (matched) {
                Object value = rdn.getValue();
                if (value == null) {
                    continue;
                }
                if (isOid) {
                    byte[] bytes = (byte[]) value;
                    ASN1InputStream decoder = null;
                    try {
                        decoder = new ASN1InputStream(bytes);
                        ASN1Encodable encoded = decoder.readObject();
                        DERIA5String str = DERIA5String.getInstance(encoded);
                        return str.getString();
                    } catch (IOException e) {
                        ZimbraLog.account.warn(LOG_PREFIX + "unable to decode " + type, e);
                    } finally {
                        ByteUtil.closeStream(decoder);
                    }
                } else {
                    return value.toString();
                }
            }
        }
    } catch (InvalidNameException e) {
        ZimbraLog.account.warn(LOG_PREFIX + "Invalid subject dn value" + subjectDN, e);
    }
    return null;
}

Example 85 with LdapName

use of javax.naming.ldap.LdapName in project zookeeper by apache.

the class ZKHostnameVerifier method extractCN.

private static String extractCN(final String subjectPrincipal) throws SSLException {
    if (subjectPrincipal == null) {
        return null;
    }
    try {
        final LdapName subjectDN = new LdapName(subjectPrincipal);
        final List<Rdn> rdns = subjectDN.getRdns();
        for (int i = rdns.size() - 1; i >= 0; i--) {
            final Rdn rds = rdns.get(i);
            final Attributes attributes = rds.toAttributes();
            final Attribute cn = attributes.get("cn");
            if (cn != null) {
                try {
                    final Object value = cn.get();
                    if (value != null) {
                        return value.toString();
                    }
                } catch (final NoSuchElementException ignore) {
                // ignore exception
                } catch (final NamingException ignore) {
                // ignore exception
                }
            }
        }
        return null;
    } catch (final InvalidNameException e) {
        throw new SSLException(subjectPrincipal + " is not a valid X500 distinguished name");
    }
}