org.ow2.proactive.authentication

Class PAMLoginModule

java.lang.Object

org.ow2.proactive.authentication.FileLoginModule

org.ow2.proactive.authentication.PAMLoginModule

All Implemented Interfaces:

LoginModule, Loggable

Direct Known Subclasses:

RMPAMLoginModule

public abstract class PAMLoginModule
extends FileLoginModule
implements Loggable

Authentication based on user and group file.

Since:

ProActive Scheduling 0.9.1

Field Summary

Fields

Modifier and Type	Field and Description
static String	PAM_MODULE_NAME PAM module name to be installed in the pam configuration

Fields inherited from class org.ow2.proactive.authentication.FileLoginModule

callbackHandler, ENCRYPTED_DATA_SEP, groupFile, loginFile, subject, tenantFile

Constructor Summary

Constructors

Constructor and Description
PAMLoginModule()

Method Summary

Modifier and Type	Method and Description
boolean	abort() This method is called if the LoginContext's overall authentication failed.
boolean	commit() This method is called if the LoginContext's overall authentication succeeded (the relevant REQUIRED, REQUISITE, SUFFICIENT and OPTIONAL LoginModules succeeded).
void	initialize(Subject subject, CallbackHandler callbackHandler, Map<String,?> sharedState, Map<String,?> options)
boolean	login() Authenticate the user by getting the user name and password from the CallbackHandler.
boolean	logout() Logout the user.
protected boolean	logUser(String username, String password) Check user and password from file, or authenticate with PAM.

Methods inherited from class org.ow2.proactive.authentication.FileLoginModule

checkGroupFile, checkLoginFile, checkTenantFile, getConfiguredDomains, getGroupFileName, getLoginFileName, getPrivateKey, getTenantFileName, groupMembershipFromFile, isLegacyPasswordEncryption, logUser, removeOldFailedAttempts, resetFailedAttempt, retryInHowManyMinutes, storeFailedAttempt, tenantMembershipFromFile, tooManyFailedAttempts

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.ow2.proactive.authentication.Loggable

getLogger

Field Detail

PAM_MODULE_NAME

public static final String PAM_MODULE_NAME

PAM module name to be installed in the pam configuration

See Also:

Constant Field Values

Constructor Detail

PAMLoginModule

public PAMLoginModule()

Method Detail

initialize

public void initialize(Subject subject,
                       CallbackHandler callbackHandler,
                       Map<String,?> sharedState,
                       Map<String,?> options)

Specified by:

initialize in interface LoginModule

Overrides:

initialize in class FileLoginModule

See Also:

LoginModule.initialize(Subject, CallbackHandler, Map, Map)

login

public boolean login()
              throws LoginException

Authenticate the user by getting the user name and password from the CallbackHandler.

Specified by:

login in interface LoginModule

Overrides:

login in class FileLoginModule

Returns:

true in all cases since this PAMLoginModule should not be ignored.

Throws:

FailedLoginException - if the authentication fails.

LoginException - if this LDAPLoginModule is unable to perform the authentication.

See Also:

LoginModule.login()

logUser

protected boolean logUser(String username,
                          String password)
                   throws LoginException

Check user and password from file, or authenticate with PAM.

Parameters:

username - user's login

password - user's password

Returns:

true user login and password are correct, and requested group is authorized for the user

Throws:

LoginException - if authentication and group membership fails.

commit

public boolean commit()
               throws LoginException

This method is called if the LoginContext's overall authentication succeeded (the relevant REQUIRED, REQUISITE, SUFFICIENT and OPTIONAL LoginModules succeeded).

Specified by:

commit in interface LoginModule

Overrides:

commit in class FileLoginModule

Returns:

true if this LDAPLoginModule's own login and commit attempts succeeded, or false otherwise.

Throws:

LoginException - if the commit fails.

See Also:

LoginModule.commit()

abort

public boolean abort()
              throws LoginException

This method is called if the LoginContext's overall authentication failed. (the relevant REQUIRED, REQUISITE, SUFFICIENT and OPTIONAL LoginModules did not succeed).

If this LDAPLoginModule's own authentication attempt succeeded (checked by retrieving the private state saved by the login and commit methods), then this method cleans up any state that was originally saved.

Specified by:

abort in interface LoginModule

Overrides:

abort in class FileLoginModule

Returns:

false if this LoginModule's own login and/or commit attempts failed, and true otherwise.

Throws:

LoginException - if the abort fails.

See Also:

LoginModule.abort()

logout

public boolean logout()
               throws LoginException

Logout the user.

Specified by:

logout in interface LoginModule

Overrides:

logout in class FileLoginModule

Returns:

true in all cases since this LoginModule should not be ignored.

Throws:

LoginException - if the logout fails.

See Also:

LoginModule.logout()