Package org.ldaptive.auth

Class CompareAuthenticationHandler

java.lang.Object

org.ldaptive.auth.AbstractAuthenticationHandler

org.ldaptive.auth.CompareAuthenticationHandler

All Implemented Interfaces:

AuthenticationHandler, ConnectionFactoryManager

public class CompareAuthenticationHandler
extends AbstractAuthenticationHandler

Provides an LDAP authentication implementation that uses a compare operation against the userPassword attribute. The default password scheme used is 'SHA'.

Author:

Middleware Services

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	CompareAuthenticationHandler.Scheme	Represents a password scheme used for attribute comparison.

Field Summary

Fields

Modifier and Type	Field	Description
protected static java.lang.String	DEFAULT_ATTRIBUTE	Default password attribute.
protected static java.lang.String	DEFAULT_SCHEME	Default password scheme.

Fields inherited from class org.ldaptive.auth.AbstractAuthenticationHandler

logger

Constructor Summary

Constructors

Constructor	Description
CompareAuthenticationHandler()	Default constructor.
CompareAuthenticationHandler(ConnectionFactory cf)	Creates a new compare authentication handler.

Method Summary

Modifier and Type	Method	Description
protected AuthenticationHandlerResponse	authenticateInternal(Connection c, AuthenticationCriteria criteria)	Authenticate on the supplied connection using the supplied criteria.
protected byte[]	digestCredential(Credential credential, java.lang.String algorithm)	Digests the supplied credential using the supplied algorithm.
java.lang.String	getPasswordAttribute()	Returns the password attribute.
java.lang.String	getPasswordScheme()	Returns the password scheme.
void	setPasswordAttribute(java.lang.String s)	Sets the password attribute.
void	setPasswordScheme(java.lang.String s)	Sets the password scheme.
java.lang.String	toString()

Methods inherited from class org.ldaptive.auth.AbstractAuthenticationHandler

authenticate, getAuthenticationControls, getConnectionFactory, processRequestControls, setAuthenticationControls, setConnectionFactory

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

DEFAULT_SCHEME

protected static final java.lang.String DEFAULT_SCHEME

Default password scheme. Value is "SHA:SHA".

See Also:

Constant Field Values

DEFAULT_ATTRIBUTE

protected static final java.lang.String DEFAULT_ATTRIBUTE

Default password attribute. Value is "userPassword".

See Also:

Constant Field Values

Constructor Detail

CompareAuthenticationHandler

public CompareAuthenticationHandler()

Default constructor.

CompareAuthenticationHandler

public CompareAuthenticationHandler(ConnectionFactory cf)

Creates a new compare authentication handler.

Parameters:

cf - connection factory

Method Detail

getPasswordScheme

public java.lang.String getPasswordScheme()

Returns the password scheme.

Returns:

password scheme

setPasswordScheme

public void setPasswordScheme(java.lang.String s)

Sets the password scheme.

Parameters:

s - password scheme

getPasswordAttribute

public java.lang.String getPasswordAttribute()

Returns the password attribute.

Returns:

password attribute

setPasswordAttribute

public void setPasswordAttribute(java.lang.String s)

Sets the password attribute. Must equal a readable attribute in LDAP scheme.

Parameters:

s - password attribute

authenticateInternal

protected AuthenticationHandlerResponse authenticateInternal(Connection c,
                                                             AuthenticationCriteria criteria)
                                                      throws LdapException

Description copied from class: AbstractAuthenticationHandler

Authenticate on the supplied connection using the supplied criteria.

Specified by:

authenticateInternal in class AbstractAuthenticationHandler

Parameters:

c - to authenticate on

criteria - criteria to authenticate with

Returns:

authentication handler response

Throws:

LdapException - if the authentication fails

digestCredential

protected byte[] digestCredential(Credential credential,
                                  java.lang.String algorithm)
                           throws LdapException

Digests the supplied credential using the supplied algorithm.

Parameters:

credential - to digest

algorithm - type of digest to use

Returns:

digested credential

Throws:

LdapException - if the supplied algorithm cannot be found

toString

public java.lang.String toString()

Overrides:

toString in class java.lang.Object