org.jivesoftware.wildfire.ldap
Class LdapAuthorizationProvider

java.lang.Object
  org.jivesoftware.wildfire.sasl.AbstractAuthorizationProvider
      org.jivesoftware.wildfire.ldap.LdapAuthorizationProvider

All Implemented Interfaces:

AuthorizationProvider

public class LdapAuthorizationProvider
extends AbstractAuthorizationProvider
implements AuthorizationProvider

Provider for authorization using LDAP. Checks if the authenticated principal is in the user's LDAP object using the authorizeField from the wildfire.xml file. An entry in that file would look like the following:

   <ldap>
     <authorizeField> k5login </authorizeField>
   </ldap>

This implementation requires that LDAP be configured, obviously.

Author:

Jay Kline

Constructor Summary

LdapAuthorizationProvider()

Method Summary

void	addAuthorized(String username, Collection<String> principals) Always throws UnsupportedOperationException.
void	addAuthorized(String username, String principal) Always throws UnsupportedOperationException.
boolean	authorize(String username, String principal) Returns if the principal is explicity authorized to the JID, throws an UnauthorizedException otherwise
String	description() Returns a description of the Policy
Collection<String>	getAuthorized(String username) Returns a String Collection of principals that are authorized to use the named user.
boolean	isWritable() Returns false, this implementation is not writeable.
String	name() Returns the short name of the Policy
void	setAuthorized(String username, Collection<String> principals) Always throws UnsupportedOperationException.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LdapAuthorizationProvider

public LdapAuthorizationProvider()

Method Detail

authorize

public boolean authorize(String username,
                         String principal)

Returns if the principal is explicity authorized to the JID, throws an UnauthorizedException otherwise

Specified by:

authorize in interface AuthorizationProvider

Specified by:

authorize in class AbstractAuthorizationProvider

Parameters:

username - The username requested.import org.jivesoftware.wildfire.ldap.*;

principal - The principal requesting the username.

Returns:

true is the user is authorized to be principal

getAuthorized

public Collection<String> getAuthorized(String username)

Returns a String Collection of principals that are authorized to use the named user.

Specified by:

getAuthorized in class AbstractAuthorizationProvider

Parameters:

username - the username.

Returns:

A String Collection of principals that are authorized.

isWritable

public boolean isWritable()

Returns false, this implementation is not writeable.

Specified by:

isWritable in class AbstractAuthorizationProvider

Returns:

False.

addAuthorized

public void addAuthorized(String username,
                          String principal)
                   throws UnsupportedOperationException

Always throws UnsupportedOperationException.

Specified by:

addAuthorized in class AbstractAuthorizationProvider

Parameters:

username - The username.

principal - The principal authorized to use the named user.

Throws:

UnsupportedOperationException - If this AuthorizationProvider cannot be updated.

addAuthorized

public void addAuthorized(String username,
                          Collection<String> principals)
                   throws UnsupportedOperationException

Always throws UnsupportedOperationException.

Specified by:

addAuthorized in class AbstractAuthorizationProvider

Parameters:

username - The username.

principals - The Collection of principals authorized to use the named user.

Throws:

UnsupportedOperationException - If this AuthorizationProvider cannot be updated.

setAuthorized

public void setAuthorized(String username,
                          Collection<String> principals)
                   throws UnsupportedOperationException

Always throws UnsupportedOperationException.

Specified by:

setAuthorized in class AbstractAuthorizationProvider

Parameters:

username - The username.

principals - The Collection of principals authorized to use the named user.

Throws:

UnsupportedOperationException - If this AuthorizationProvider cannot be updated.

name

public String name()

Returns the short name of the Policy

Specified by:

name in class AbstractAuthorizationProvider

Returns:

The short name of the Policy

description

public String description()

Returns a description of the Policy

Specified by:

description in class AbstractAuthorizationProvider

Returns:

The description of the Policy.