Examples with AuthenticationException javax.security.sasl.AuthenticationException used on opensource projects

Example 6 with AuthenticationException

use of javax.security.sasl.AuthenticationException in project hive by apache.

the class LdapAuthenticationProviderImpl method Authenticate.

@Override
public void Authenticate(String user, String password) throws AuthenticationException {
    DirSearch search = null;
    String bindUser = this.conf.getVar(HiveConf.ConfVars.HIVE_SERVER2_PLAIN_LDAP_BIND_USER);
    String bindPassword = null;
    try {
        char[] rawPassword = this.conf.getPassword(HiveConf.ConfVars.HIVE_SERVER2_PLAIN_LDAP_BIND_PASSWORD.toString());
        if (rawPassword != null) {
            bindPassword = new String(rawPassword);
        }
    } catch (IOException e) {
        bindPassword = null;
    }
    boolean usedBind = bindUser != null && bindPassword != null;
    if (!usedBind) {
        // If no bind user or bind password was specified,
        // we assume the user we are authenticating has the ability to search
        // the LDAP tree, so we use it as the "binding" account.
        // This is the way it worked before bind users were allowed in the LDAP authenticator,
        // so we keep existing systems working.
        bindUser = user;
        bindPassword = password;
    }
    try {
        search = createDirSearch(bindUser, bindPassword);
        applyFilter(search, user);
        if (usedBind) {
            // If we used the bind user, then we need to authenticate again,
            // this time using the full user name we got during the bind process.
            createDirSearch(search.findUserDn(user), password);
        }
    } catch (NamingException e) {
        throw new AuthenticationException("Unable to find the user in the LDAP tree. " + e.getMessage());
    } finally {
        ServiceUtils.cleanup(LOG, search);
    }
}

Example 7 with AuthenticationException

use of javax.security.sasl.AuthenticationException in project hive by apache.

the class PamAuthenticationProviderImpl method Authenticate.

@Override
public void Authenticate(String user, String password) throws AuthenticationException {
    if (pamServiceNames == null || pamServiceNames.trim().isEmpty()) {
        throw new AuthenticationException("No PAM services are set.");
    }
    String errorMsg = "Error authenticating with the PAM service: ";
    String[] pamServices = pamServiceNames.split(",");
    for (String pamService : pamServices) {
        try {
            Pam pam = new Pam(pamService);
            boolean isAuthenticated = pam.authenticateSuccessful(user, password);
            if (!isAuthenticated) {
                throw new AuthenticationException(errorMsg + pamService);
            }
        } catch (Throwable e) {
            // the client nicely
            throw new AuthenticationException(errorMsg + pamService, e);
        }
    }
}

Example 8 with AuthenticationException

use of javax.security.sasl.AuthenticationException in project hive by apache.

the class MetaStoreLdapAuthenticationProviderImpl method authenticate.

@Override
public void authenticate(String user, String password) throws AuthenticationException {
    DirSearch search = null;
    String bindUser = MetastoreConf.getVar(this.conf, MetastoreConf.ConfVars.METASTORE_PLAIN_LDAP_BIND_USER);
    if (StringUtils.isBlank(bindUser)) {
        bindUser = null;
    }
    String bindPassword;
    try {
        bindPassword = MetastoreConf.getPassword(this.conf, MetastoreConf.ConfVars.METASTORE_PLAIN_LDAP_BIND_PASSWORD);
        if (StringUtils.isBlank(bindPassword)) {
            bindPassword = null;
        }
    } catch (IOException e) {
        bindPassword = null;
    }
    boolean usedBind = bindUser != null && bindPassword != null;
    if (!usedBind) {
        // If no bind user or bind password was specified,
        // we assume the user we are authenticating has the ability to search
        // the LDAP tree, so we use it as the "binding" account.
        // This is the way it worked before bind users were allowed in the LDAP authenticator,
        // so we keep existing systems working.
        bindUser = user;
        bindPassword = password;
    }
    try {
        search = createDirSearch(bindUser, bindPassword);
        applyFilter(search, user);
        if (usedBind) {
            // If we used the bind user, then we need to authenticate again,
            // this time using the full user name we got during the bind process.
            createDirSearch(search.findUserDn(user), password);
        }
    } catch (NamingException e) {
        throw new AuthenticationException("Unable to find the user in the LDAP tree. " + e.getMessage());
    } finally {
        ServiceUtils.cleanup(LOG, search);
    }
}