edu.internet2.middleware.grouper.ws.security

Class WsGrouperLdapAuthentication

java.lang.Object

edu.internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication

All Implemented Interfaces:

WsCustomAuthentication

public class WsGrouperLdapAuthentication
extends java.lang.Object
implements WsCustomAuthentication

 ldap bind authentication for grouper, settings are specified in grouper-ws.properties, and the grouper-loader.properties
 note: this can be used for rest and soap, though it is not a bastion of security:
  1. for soap, ws-security would be better since a ticket is passed instead of user/pass
  2. for rest, Im not sure there is another option
  3. the user/pass is transmitted in basic auth, so make sure SSL is on
  4. if using proxied web services, the password goes to the middle component
 
 

Constructor Summary

Constructors

Constructor and Description
WsGrouperLdapAuthentication()

Method Summary

Modifier and Type	Method and Description
static boolean	authenticateLdap(java.lang.String principal, java.lang.String password) see if a user and pass are correct with ldap
static void	main(java.lang.String[] args)
java.lang.String	retrieveLoggedInSubjectId(javax.servlet.http.HttpServletRequest httpServletRequest) retrieve the current username (subjectId) from the request object.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

WsGrouperLdapAuthentication

public WsGrouperLdapAuthentication()

Method Detail

main

public static void main(java.lang.String[] args)
                 throws java.lang.Exception

Parameters:

args -

Throws:

java.lang.Exception

retrieveLoggedInSubjectId

public java.lang.String retrieveLoggedInSubjectId(javax.servlet.http.HttpServletRequest httpServletRequest)
                                           throws java.lang.RuntimeException

Description copied from interface: WsCustomAuthentication

retrieve the current username (subjectId) from the request object.

Specified by:

retrieveLoggedInSubjectId in interface WsCustomAuthentication

Returns:

the logged in username (subjectId)

Throws:

WsInvalidQueryException - if there is a problem

java.lang.RuntimeException

See Also:

WsCustomAuthentication.retrieveLoggedInSubjectId(javax.servlet.http.HttpServletRequest)

authenticateLdap

public static boolean authenticateLdap(java.lang.String principal,
                                       java.lang.String password)

see if a user and pass are correct with ldap

Parameters:

principal -

password -

Returns:

true for ok, false for not