/ - Diff - Metacat - Ecoinformatics Redmine

« Previous | Next »

Revision 868

Added by berkley about 23 years ago

fixed referral catching mechanism in authLdap.ldapAuthenticate() so that it will refer through a bunch of linked servers instead of just one....I still haven't figured out why the getGroups method wont work.

     import javax.naming.directory.InitialDirContext;
     import javax.naming.directory.SearchResult;
     import javax.naming.directory.SearchControls;
     import javax.naming.ReferralException;
     import javax.naming.ldap.*;
     import java.util.Iterator;
     import java.util.HashMap;
-...
       public boolean authenticate(String user, String password)
                         throws ConnectException
+      {
         //System.out.println("ldap authenticating");
         System.out.println("ldap authenticating");
         String ldapUrl = this.ldapUrl;
         String ldapsUrl = this.ldapsUrl;
         String ldapBase = this.ldapBase;
-...
             //System.out.println("referral: " + referral);
             // Now that we have the dn, we can authenticate, so
             // authenticate this time when opening the DirContext
             //System.out.println("referral=throw");
             env.put(Context.REFERRAL, "throw");
             /*CB:  Note that the above env.put statement does not use the referral
               variable.  it is hard coded to 'throw'.  Matt: Is it ok to do this
-...
               if ( ctx != null ) {
                 ctx.close();
+              }
             } catch (javax.naming.InvalidNameException ine) {
+            }
             catch (javax.naming.InvalidNameException ine)
+            {
                 System.out.println("An invalid DN was provided!");
             } catch(javax.naming.ReferralException re) {
     	        System.out.println("referral to : " + re.getReferralInfo().toString());
                 try
+                {
                   /*
                    Matt, I think this is right but I'm not sure...please check me to make
                    sure I didn't do something wrong here.
                   */
                   double refStartTime = System.currentTimeMillis();
                   Context refctx = re.getReferralContext(env);
                   authenticated = true;
                   refctx.close();
                   this.ldapUrl = ldapUrl;
                   this.ldapBase = ldapBase;
                   double refStopTime = System.currentTimeMillis();
                   System.out.println("total referral time: " +
                                     (refStopTime - refStartTime)/1000 + " seconds");
+                }
                 catch(Exception e)
+                {
                     System.out.println("Error with referral to : " +
                                        re.getReferralInfo().toString());
                     authenticated = false;
+                }
+    	}
+            }
             catch(javax.naming.ReferralException re)
+            {
     	        try
+              {
                 Context c = handleReferral(env, re);
                 authenticated = true;
+              }
               catch(Exception e)
+              {
                 authenticated = false;
+              }
+            }
         } else {
             util.debugMessage("User not found");
+        }
-...
                           (totStopTime - totStartTime)/1000 + " seconds");
         return authenticated;
+      }
       /**
        * handles a referral exception.  this method should be called from
        * within the catch statement of a ReferralException
        */
       private Context handleReferral(Hashtable env, ReferralException re)
                       throws Exception
+      {
         System.out.println("referral to : " + re.getReferralInfo().toString());
         boolean referralSuccess = false;
         while(referralSuccess != true)
+        {
           try
+          {
             /*
              Matt, I think this is right but I'm not sure...please check me to make
              sure I didn't do something wrong here.
             */
             double refStartTime = System.currentTimeMillis();
             Context refctx = re.getReferralContext(env);
             referralSuccess = true;
             refctx.close();
             this.ldapUrl = ldapUrl;
             this.ldapBase = ldapBase;
             double refStopTime = System.currentTimeMillis();
             System.out.println("total referral time: " +
                               (refStopTime - refStartTime)/1000 + " seconds");
             return refctx;
+          }
           catch(ReferralException e)
+          {
               System.out.println("Referring to: " +
                                  re.getReferralInfo().toString());
+          }
           catch(Exception e)
+          {
             throw e;
+          }
+        }
         return null; //this should never get called
+      }
       /**
        * Get the identifying name for a given userid or name.  This is the name
-...
             ctx.close();
         } catch (NamingException e) {
           System.err.println("Problem getting groups in AuthLdap.getGroups:" + e);
           System.err.println("Problem getting groups in AuthLdap.getGroups 1:" + e);
           throw new ConnectException(
           "Problem getting groups in AuthLdap.getGroups:" + e);
+        }
-...
       public String[] getGroups(String user, String password, String foruser)
              throws ConnectException
+      {
         //System.err.println("GG in get groups 2");
         String[] groups = null;
         // Identify service provider to use
-...
         env.put(Context.INITIAL_CONTEXT_FACTORY,
                 "com.sun.jndi.ldap.LdapCtxFactory");
         env.put(Context.REFERRAL, referral);
         //System.out.println("GG server: " + ldapUrl + ldapBase);
         env.put(Context.PROVIDER_URL, ldapUrl + ldapBase);
         try {
-...
             // Specify the attributes to match.
             // Groups are objects with attribute objectclass=groupofuniquenames.
             // and have attribute uniquemember: uid=foruser,ldapbase.
             Attributes matchAttrs = new BasicAttributes(true); // ignore case
             matchAttrs.put(new BasicAttribute("objectclass", "groupofuniquenames"));
             Attributes matchAttrs = new BasicAttributes(); // ignore case
             matchAttrs.put(new BasicAttribute("objectClass", "groupOfUniqueNames"));
             //System.out.println("GG user: " + user);
             //System.out.println("GG foruser: " + foruser);
             String dn = user;/*getIdentifyingName(foruser, ldapUrl, ldapBase);*/
             matchAttrs.put(new BasicAttribute("uniquemember",dn+","+ldapBase));
             //System.out.println("GG dn: " + dn);
             matchAttrs.put(new BasicAttribute("uniqueMember", dn));
             // Search for objects in the current context
             //System.out.println("GG matchAttrs: " + matchAttrs.toString());
             NamingEnumeration enum = ctx.search("", matchAttrs, attrIDs);
             // Print the users
             Vector uvec = new Vector();
             while (enum.hasMore()) {
               //System.out.println("GG search result found");
               SearchResult sr = (SearchResult)enum.next();
               Attributes attrs = sr.getAttributes();
               NamingEnumeration enum1 = attrs.getAll(); // only "cn" attr
-...
+            }
             // initialize groups[] and fill it
             //System.out.println("GG getting groups: " + uvec.size());
             groups = new String[uvec.size()];
             for (int i=0; i < uvec.size(); i++) {
               //System.out.println("GG group: " + groups[i]);
               groups[i] = (String)uvec.elementAt(i);
+            }
-...
             ctx.close();
         } catch (NamingException e) {
           System.err.println("Problem getting groups in AuthLdap.getGroups:" + e);
           System.err.println("Problem getting groups in AuthLdap.getGroups 2:" + e);
           e.printStackTrace(System.err);
           throw new ConnectException(
           "Problem getting groups for a user in AuthLdap.getGroups:" + e);
+        }
         return groups;
+      }

Also available in: Unified diff

Project

General

Profile

Metacat

Revision 868

Added by berkley about 23 years ago