|
||||||||||
| PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
| SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD | |||||||||
The user service is intended as a thin layer on top of the JAAS specification. In particular
the User service allows participating services to specify dynamic priviliges for authenticated
Subjects.
Services whishing to take part of this service implements a LoginListener interface
that will allow them to be informed when a Subject is authenticated.
All methods in this interface is subject to a security check using the UserPermission
permission when they are called.
For service that can only verify indirect passwords (for example, hashed SASL services) the user
service offers verification through indirection. The indirection object will then
be used to verify the password through possible transformations. The indirections are available through
an indirection factory.
The norna user service has a fixed Namespace ID, "/norna/users", which is also a static identifier in this class.
Authenticator,
LoginEvent| Field Summary | |
static java.lang.String |
NAMESPACE_ID
The fixed namespace ID, "/norna/users" |
| Method Summary | |
Authenticator |
getAuthenticator(java.lang.String user)
Get an authenicator interface for a user. |
Authenticator |
getAuthenticator(java.lang.String user,
Indirection ind)
Get an authentication that works by indirection. |
IndirectionFactory |
getIndirectionFactory()
Get the indirection factory for the service. |
| Methods inherited from interface net.larsan.norna.base.ServiceHandle |
getStatus |
| Field Detail |
public static final java.lang.String NAMESPACE_ID
| Method Detail |
public Authenticator getAuthenticator(java.lang.String user)
throws NoSuchUserException,
java.lang.SecurityException
user - User to authenicate
Authenticator for the user
NoSuchUserException - If the user name does not exist
java.lang.SecurityException - If the caller does not have permission to access this method
public Authenticator getAuthenticator(java.lang.String user,
Indirection ind)
throws NoSuchUserException,
IndirectionUnavailableException,
java.lang.SecurityException
user - User to authenticateind - Indirection to use
Authenticator for the user
NoSuchUserException - If the user name does not exist
IndirectionUnavailableException - If indirection is not available
java.lang.SecurityException - If the caller does not have permission to access this methodpublic IndirectionFactory getIndirectionFactory()
|
||||||||||
| PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
| SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD | |||||||||