Examples with AppConfigurationEntry javax.security.auth.login.AppConfigurationEntry used on opensource projects

Example 41 with AppConfigurationEntry

use of javax.security.auth.login.AppConfigurationEntry in project wildfly by wildfly.

the class SecurityDomainAdd method processClassicAuth.

private boolean processClassicAuth(OperationContext context, String securityDomain, ModelNode node, ApplicationPolicy applicationPolicy) throws OperationFailedException {
    node = peek(node, AUTHENTICATION, CLASSIC);
    if (node == null) {
        return false;
    }
    final AuthenticationInfo authenticationInfo = new AuthenticationInfo(securityDomain);
    if (node.hasDefined(Constants.LOGIN_MODULE)) {
        processLoginModules(context, node.get(LOGIN_MODULE), authenticationInfo, new LoginModuleContainer() {

            public void addAppConfigurationEntry(AppConfigurationEntry entry) {
                authenticationInfo.add(entry);
            }
        });
    }
    //Check for module
    applicationPolicy.setAuthenticationInfo(authenticationInfo);
    return true;
}

Example 42 with AppConfigurationEntry

use of javax.security.auth.login.AppConfigurationEntry in project wildfly by wildfly.

the class SecurityDomainAdd method processLoginModules.

private void processLoginModules(OperationContext context, ModelNode node, BaseAuthenticationInfo authInfo, LoginModuleContainer container) throws OperationFailedException {
    for (Property moduleProperty : node.asPropertyList()) {
        ModelNode module = moduleProperty.getValue();
        String codeName = extractCode(context, module, ModulesMap.AUTHENTICATION_MAP);
        String flag = LoginModuleResourceDefinition.FLAG.resolveModelAttribute(context, module).asString();
        LoginModuleControlFlag controlFlag = getControlFlag(flag);
        Map<String, Object> options = extractOptions(context, module);
        AppConfigurationEntry entry = new AppConfigurationEntry(codeName, controlFlag, options);
        container.addAppConfigurationEntry(entry);
        ModelNode moduleName = LoginModuleResourceDefinition.MODULE.resolveModelAttribute(context, module);
        if (moduleName.isDefined() && !moduleName.asString().isEmpty()) {
            authInfo.addJBossModuleName(moduleName.asString());
        } else {
            authInfo.addJBossModuleName(DEFAULT_MODULE);
        }
    }
}

Example 43 with AppConfigurationEntry

use of javax.security.auth.login.AppConfigurationEntry in project simba-os by cegeka.

the class JaasLoginCommandTest method setupJAAS.

private void setupJAAS() {
    Configuration configurationMock = mock(Configuration.class);
    AppConfigurationEntry entry = new AppConfigurationEntry(TestLoginModule.class.getName(), LoginModuleControlFlag.REQUIRED, Collections.<String, Object>emptyMap());
    when(configurationMock.getAppConfigurationEntry(LOGIN_MODULE_NAME)).thenReturn(new AppConfigurationEntry[] { entry });
    Configuration.setConfiguration(configurationMock);
}

Example 44 with AppConfigurationEntry

use of javax.security.auth.login.AppConfigurationEntry in project zookeeper by apache.

the class JaasConfiguration method addSection.

/**
 * Add a section to the jaas.conf
 * @param name Section name
 * @param loginModuleName Login module name
 * @param conf login key/value args
 */
public void addSection(String name, String loginModuleName, final Map<String, String> conf) {
    AppConfigurationEntry[] entries = new AppConfigurationEntry[1];
    entries[0] = new AppConfigurationEntry(loginModuleName, LoginModuleControlFlag.REQUIRED, conf);
    this.sections.put(name, entries);
}

Example 45 with AppConfigurationEntry

use of javax.security.auth.login.AppConfigurationEntry in project zookeeper by apache.

the class ServerCnxnFactory method configureSaslLogin.

/**
 * Initialize the server SASL if specified.
 *
 * If the user has specified a "ZooKeeperServer.LOGIN_CONTEXT_NAME_KEY"
 * or a jaas.conf using "java.security.auth.login.config"
 * the authentication is required and an exception is raised.
 * Otherwise no authentication is configured and no exception is raised.
 *
 * @throws IOException if jaas.conf is missing or there's an error in it.
 */
protected void configureSaslLogin() throws IOException {
    String serverSection = System.getProperty(ZooKeeperSaslServer.LOGIN_CONTEXT_NAME_KEY, ZooKeeperSaslServer.DEFAULT_LOGIN_CONTEXT_NAME);
    // Note that 'Configuration' here refers to javax.security.auth.login.Configuration.
    AppConfigurationEntry[] entries = null;
    SecurityException securityException = null;
    try {
        entries = Configuration.getConfiguration().getAppConfigurationEntry(serverSection);
    } catch (SecurityException e) {
        // handle below: might be harmless if the user doesn't intend to use JAAS authentication.
        securityException = e;
    }
    // we throw an exception otherwise we continue without authentication.
    if (entries == null) {
        String jaasFile = System.getProperty(Environment.JAAS_CONF_KEY);
        String loginContextName = System.getProperty(ZooKeeperSaslServer.LOGIN_CONTEXT_NAME_KEY);
        if (securityException != null && (loginContextName != null || jaasFile != null)) {
            String errorMessage = "No JAAS configuration section named '" + serverSection + "' was found";
            if (jaasFile != null) {
                errorMessage += "in '" + jaasFile + "'.";
            }
            if (loginContextName != null) {
                errorMessage += " But " + ZooKeeperSaslServer.LOGIN_CONTEXT_NAME_KEY + " was set.";
            }
            LOG.error(errorMessage);
            throw new IOException(errorMessage);
        }
        return;
    }
    // jaas.conf entry available
    try {
        saslServerCallbackHandler = new SaslServerCallbackHandler(Configuration.getConfiguration());
        login = new Login(serverSection, saslServerCallbackHandler, new ZKConfig());
        login.startThreadIfNeeded();
    } catch (LoginException e) {
        throw new IOException("Could not configure server because SASL configuration did not allow the " + " ZooKeeper server to authenticate itself properly: " + e);
    }
}