Examples with ConnectorSecurityException org.identityconnectors.framework.common.exceptions.ConnectorSecurityException used on opensource projects

Example 1 with ConnectorSecurityException

use of org.identityconnectors.framework.common.exceptions.ConnectorSecurityException in project midpoint by Evolveum.

the class ConnIdUtil method processIcfException.

/**
	 * Transform ConnId exception to something more usable.
	 *
	 * ICF throws exceptions that contains inner exceptions that cannot be
	 * reached by current classloader. Such inner exceptions may cause a lot
	 * of problems in upper layers, such as attempt to serialize/deserialize
	 * them. Therefore we cannot pass such exceptions to the upper layers.
	 * As Throwable is immutable and there is no good way how to copy it, we
	 * just cannot remove the "bad" exceptions from the inner exception stack.
	 * We need to do the brutal thing: remove all the ICF exceptions and do
	 * not pass then to upper layers. Try to save at least some information
	 * and "compress" the class names and messages of the inner ICF exceptions.
	 * The full exception with a stack trace is logged here, so the details are
	 * still in the log.
	 * 
	 * WARNING: This is black magic. Really. Blame Sun Identity Connector
	 * Framework interface design.
	 * 
	 * @param connIdException
	 *            exception from the ConnId
	 * @param connIdResult
	 *            OperationResult to record failure
	 * @return reasonable midPoint exception
	 */
static Throwable processIcfException(Throwable connIdException, String desc, OperationResult connIdResult) {
    if (connIdException == null) {
        connIdResult.recordFatalError("Null exception while processing ConnId exception ");
        throw new IllegalArgumentException("Null exception while processing ConnId exception ");
    }
    LOGGER.error("ConnId Exception {} in {}: {}", connIdException.getClass().getName(), desc, connIdException.getMessage(), connIdException);
    if (connIdException instanceof RemoteWrappedException) {
        // brutal hack, for now
        RemoteWrappedException remoteWrappedException = (RemoteWrappedException) connIdException;
        String className = remoteWrappedException.getExceptionClass();
        if (className == null) {
            LOGGER.error("Remote ConnId exception without inner exception class name. Continuing with original one: {}", connIdException);
        } else if (DOT_NET_ARGUMENT_EXCEPTION.equals(className) && remoteWrappedException.getMessage().contains("0x800708C5")) {
            // password too weak
            connIdException = new SecurityViolationException(connIdException.getMessage(), connIdException);
        } else {
            if (className.startsWith(DOT_NET_EXCEPTION_PACKAGE_PLUS_DOT)) {
                className = JAVA_EXCEPTION_PACKAGE + "." + className.substring(DOT_NET_EXCEPTION_PACKAGE_PLUS_DOT.length());
                LOGGER.trace("Translated exception class: {}", className);
            }
            try {
                connIdException = (Throwable) Class.forName(className).getConstructor(String.class, Throwable.class).newInstance(remoteWrappedException.getMessage(), remoteWrappedException);
            } catch (InstantiationException | IllegalAccessException | ClassNotFoundException | NoSuchMethodException | InvocationTargetException e) {
                LoggingUtils.logException(LOGGER, "Couldn't unwrap remote ConnId exception, continuing with original one {}", e, connIdException);
            }
        }
    }
    if (connIdException instanceof NullPointerException && connIdException.getMessage() != null) {
        // NPE with a message text is in fact not a NPE but an application exception
        // this usually means that some parameter is missing
        Exception newEx = new SchemaException(createMessageFromAllExceptions("Required attribute is missing", connIdException));
        connIdResult.recordFatalError("Required attribute is missing: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof IllegalArgumentException) {
        // Let's assume this must be a configuration problem
        Exception newEx = new com.evolveum.midpoint.util.exception.ConfigurationException(createMessageFromInnermostException("Configuration error", connIdException));
        connIdResult.recordFatalError("Configuration error: " + connIdException.getMessage(), newEx);
        return newEx;
    }
    //this exception is to be analyzed here before the following if clause
    if (connIdException.getCause() != null) {
        String exCauseClassName = connIdException.getCause().getClass().getSimpleName();
        if (exCauseClassName.equals(CONNECTIONS_EXCEPTION_CLASS_NAME)) {
            Exception newEx = new CommunicationException(createMessageFromAllExceptions("Connect error", connIdException));
            connIdResult.recordFatalError("Connect error: " + connIdException.getMessage(), newEx);
            return newEx;
        }
    }
    if (connIdException.getClass().getPackage().equals(NullPointerException.class.getPackage())) {
        // There are java.lang exceptions, they are safe to pass through
        connIdResult.recordFatalError(connIdException);
        return connIdException;
    }
    if (connIdException.getClass().getPackage().equals(SchemaException.class.getPackage())) {
        // Common midPoint exceptions, pass through
        connIdResult.recordFatalError(connIdException);
        return connIdException;
    }
    if (connIdResult == null) {
        throw new IllegalArgumentException(createMessageFromAllExceptions("Null parent result while processing ConnId exception", connIdException));
    }
    // Introspect the inner exceptions and look for known causes
    Exception knownCause = lookForKnownCause(connIdException, connIdException, connIdResult);
    if (knownCause != null) {
        connIdResult.recordFatalError(knownCause);
        return knownCause;
    }
    // Otherwise try few obvious things
    if (connIdException instanceof IllegalArgumentException) {
        // This is most likely missing attribute or similar schema thing
        Exception newEx = new SchemaException(createMessageFromAllExceptions("Schema violation (most likely)", connIdException));
        connIdResult.recordFatalError("Schema violation: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof ConfigurationException) {
        Exception newEx = new com.evolveum.midpoint.util.exception.ConfigurationException(createMessageFromInnermostException("Configuration error", connIdException));
        connIdResult.recordFatalError("Configuration error: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof AlreadyExistsException) {
        Exception newEx = new ObjectAlreadyExistsException(createMessageFromAllExceptions(null, connIdException));
        connIdResult.recordFatalError("Object already exists: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof PermissionDeniedException) {
        Exception newEx = new SecurityViolationException(createMessageFromAllExceptions(null, connIdException));
        connIdResult.recordFatalError("Security violation: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof ConnectionBrokenException) {
        Exception newEx = new CommunicationException(createMessageFromAllExceptions("Connection broken", connIdException));
        connIdResult.recordFatalError("Connection broken: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof ConnectionFailedException) {
        Exception newEx = new CommunicationException(createMessageFromAllExceptions("Connection failed", connIdException));
        connIdResult.recordFatalError("Connection failed: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof UnknownHostException) {
        Exception newEx = new CommunicationException(createMessageFromAllExceptions("Unknown host", connIdException));
        connIdResult.recordFatalError("Unknown host: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof ConnectorIOException) {
        Exception newEx = new CommunicationException(createMessageFromAllExceptions("IO error", connIdException));
        connIdResult.recordFatalError("IO error: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof InvalidCredentialException) {
        Exception newEx = new GenericFrameworkException(createMessageFromAllExceptions("Invalid credentials", connIdException));
        connIdResult.recordFatalError("Invalid credentials: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof OperationTimeoutException) {
        Exception newEx = new CommunicationException(createMessageFromAllExceptions("Operation timed out", connIdException));
        connIdResult.recordFatalError("Operation timed out: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof UnknownUidException) {
        Exception newEx = new ObjectNotFoundException(createMessageFromAllExceptions(null, connIdException));
        connIdResult.recordFatalError("Unknown UID: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof InvalidAttributeValueException) {
        Exception newEx = new SchemaException(createMessageFromAllExceptions(null, connIdException));
        connIdResult.recordFatalError("Schema violation: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof RetryableException) {
        Exception newEx = new CommunicationException(createMessageFromAllExceptions(null, connIdException));
        connIdResult.recordFatalError("Retryable errror: " + connIdException.getMessage(), newEx);
        return newEx;
    } else if (connIdException instanceof ConnectorSecurityException) {
        // Note: connection refused is also packed inside
        // ConnectorSecurityException. But that will get addressed by the
        // lookForKnownCause(..) before
        // Maybe we need special exception for security?
        Exception newEx = new SecurityViolationException(createMessageFromAllExceptions("Security violation", connIdException));
        connIdResult.recordFatalError("Security violation: " + connIdException.getMessage(), newEx);
        return newEx;
    }
    // Fallback
    Exception newEx = new GenericFrameworkException(createMessageFromAllExceptions(null, connIdException));
    connIdResult.recordFatalError(newEx);
    return newEx;
}