Examples with DbUser org.ovirt.engine.core.common.businessentities.aaa.DbUser used on opensource projects

Example 41 with DbUser

use of org.ovirt.engine.core.common.businessentities.aaa.DbUser in project ovirt-engine by oVirt.

the class CreateUserSessionCommand method executeCommand.

@Override
protected void executeCommand() {
    final AuthenticationProfile profile = AuthenticationProfileRepository.getInstance().getProfile(getParameters().getProfileName());
    sourceIp = getParameters().getSourceIp();
    if (profile == null) {
        setSucceeded(false);
    } else {
        final DbUser user = buildUser(getParameters(), profile.getAuthzName());
        boolean isAdmin = !roleDao.getAnyAdminRoleForUserAndGroups(user.getId(), StringUtils.join(user.getGroupIds(), ",")).isEmpty();
        user.setAdmin(isAdmin);
        setCurrentUser(user);
        setUserName(String.format("%s@%s", getCurrentUser().getLoginName(), getCurrentUser().getDomain()));
        if (getParameters().isAdminRequired() && !isAdmin) {
            setSucceeded(false);
        } else if (permissionDao.getEntityPermissionsForUserAndGroups(user.getId(), StringUtils.join(user.getGroupIds(), ","), ActionGroup.LOGIN, BOTTOM_OBJECT_ID, VdcObjectType.Bottom, true) == null) {
            setSucceeded(false);
        } else {
            String engineSessionId = sessionDataContainer.generateEngineSessionId();
            sessionDataContainer.setSourceIp(engineSessionId, getParameters().getSourceIp());
            sessionDataContainer.setUser(engineSessionId, user);
            sessionDataContainer.refresh(engineSessionId);
            sessionDataContainer.setProfile(engineSessionId, profile);
            sessionDataContainer.setPrincipalName(engineSessionId, getParameters().getPrincipalName());
            sessionDataContainer.setSsoAccessToken(engineSessionId, getParameters().getSsoToken());
            sessionDataContainer.setSsoOvirtAppApiScope(engineSessionId, getParameters().getAppScope());
            getReturnValue().setActionReturnValue(engineSessionId);
            setSucceeded(true);
            sessionId = engineSessionId;
        }
    }
}

Example 42 with DbUser

use of org.ovirt.engine.core.common.businessentities.aaa.DbUser in project ovirt-engine by oVirt.

the class DirectoryUtils method mapPrincipalRecordToDbUser.

public DbUser mapPrincipalRecordToDbUser(String authz, ExtMap principal) {
    principal = principal.clone();
    flatGroups(principal);
    DbUser dbUser = dbUserDao.getByExternalId(authz, principal.get(PrincipalRecord.ID));
    Guid userId = dbUser != null ? dbUser.getId() : Guid.newGuid();
    dbUser = new DbUser(mapPrincipalRecordToDirectoryUser(authz, principal));
    dbUser.setId(userId);
    Set<Guid> groupIds = new HashSet<>();
    Set<String> groupsNames = new HashSet<>();
    for (ExtMap group : principal.<Collection<ExtMap>>get(PrincipalRecord.GROUPS, Collections.<ExtMap>emptyList())) {
        DbGroup dbGroup = dbGroupDao.getByExternalId(authz, group.get(GroupRecord.ID));
        if (dbGroup != null) {
            groupIds.add(dbGroup.getId());
            groupsNames.add(dbGroup.getName());
        }
    }
    dbUser.setGroupIds(groupIds);
    dbUser.setGroupNames(groupsNames);
    return dbUser;
}

Example 43 with DbUser

use of org.ovirt.engine.core.common.businessentities.aaa.DbUser in project ovirt-engine by oVirt.

the class LoginOnBehalfCommand method executeCommand.

@Override
protected void executeCommand() {
    try {
        DbUser dbUser = getDbUser();
        logInfo = String.format("for user %s", dbUser.getLoginName());
        getReturnValue().setActionReturnValue(createSession(dbUser, dbUser.getDomain(), loginOnBehalf(dbUser)));
        setSucceeded(true);
    } catch (Exception ex) {
        log.error("Unable to create engine session: {}", ex.getMessage());
        log.debug("Unable to create engine session", ex);
    }
}

Example 44 with DbUser

use of org.ovirt.engine.core.common.businessentities.aaa.DbUser in project ovirt-engine by oVirt.

the class LoginOnBehalfCommand method createSession.

private String createSession(DbUser mappedUser, String authzName, ExtMap principalRecord) {
    directoryUtils.flatGroups(principalRecord);
    DbUser dbUser = directoryUtils.mapPrincipalRecordToDbUser(authzName, principalRecord);
    dbUser.setId(mappedUser.getId());
    String engineSessionId;
    byte[] s = new byte[64];
    new SecureRandom().nextBytes(s);
    engineSessionId = new Base64(0).encodeToString(s);
    sessionDataContainer.setUser(engineSessionId, dbUser);
    sessionDataContainer.refresh(engineSessionId);
    return engineSessionId;
}

Example 45 with DbUser

use of org.ovirt.engine.core.common.businessentities.aaa.DbUser in project ovirt-engine by oVirt.

the class LoginOnBehalfCommand method getDbUserForPrincipalName.

private DbUser getDbUserForPrincipalName(String principalName, String authzName) {
    Map<String, Object> response = SsoOAuthServiceUtils.fetchPrincipalRecord(getSessionDataContainer().getSsoAccessToken(getParameters().getSessionId()), authzName, principalName, false, false);
    ExtMap principalRecord = null;
    if (response.containsKey("result")) {
        Collection<ExtMap> records = (Collection<ExtMap>) response.get("result");
        if (!records.isEmpty()) {
            principalRecord = records.iterator().next();
        }
    }
    if (principalRecord == null) {
        throw new EngineException(EngineError.PRINCIPAL_NOT_FOUND, String.format("%s in domain '%s", principalName, authzName));
    }
    DbUser user = new DbUser(directoryUtils.mapPrincipalRecordToDirectoryUser(authzName, principalRecord));
    user.setId(Guid.newGuid());
    return user;
}