hudson.plugins.active_directory

Class ActiveDirectoryUnixAuthenticationProvider

java.lang.Object

org.acegisecurity.providers.dao.AbstractUserDetailsAuthenticationProvider

hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider

All Implemented Interfaces:

GroupDetailsService, org.acegisecurity.providers.AuthenticationProvider, org.acegisecurity.userdetails.UserDetailsService, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware

public class ActiveDirectoryUnixAuthenticationProvider
extends AbstractActiveDirectoryAuthenticationProvider

AuthenticationProvider with Active Directory, through LDAP.

Author:

Kohsuke Kawaguchi, James Nord

Field Summary

Fields inherited from class hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

SHOW_USER_NOT_FOUND_EXCEPTION

Fields inherited from class org.acegisecurity.providers.dao.AbstractUserDetailsAuthenticationProvider

hideUserNotFoundExceptions, messages

Constructor Summary

Constructors

Constructor and Description
ActiveDirectoryUnixAuthenticationProvider(ActiveDirectorySecurityRealm realm)

Method Summary

Methods

Modifier and Type	Method and Description
protected boolean	canRetrieveUserByName() Returns true if we can retrieve user just from the name without supplying any credential.
hudson.security.GroupDetails	loadGroupByGroupname(String groupname)
org.acegisecurity.userdetails.UserDetails	retrieveUser(String username, String password, String domainName, List<SocketInfo> ldapServers) Authenticates and retrieves the user by using the given list of available AD LDAP servers.
protected org.acegisecurity.userdetails.UserDetails	retrieveUser(String username, org.acegisecurity.providers.UsernamePasswordAuthenticationToken authentication) Authenticates the user (if authentication!=null), or retrieve the user name information (otherwise.)

Methods inherited from class hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

additionalAuthenticationChecks, loadUserByUsername

Methods inherited from class org.acegisecurity.providers.dao.AbstractUserDetailsAuthenticationProvider

afterPropertiesSet, authenticate, createSuccessAuthentication, doAfterPropertiesSet, getUserCache, isForcePrincipalAsString, isHideUserNotFoundExceptions, setForcePrincipalAsString, setHideUserNotFoundExceptions, setMessageSource, setUserCache, supports

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ActiveDirectoryUnixAuthenticationProvider

public ActiveDirectoryUnixAuthenticationProvider(ActiveDirectorySecurityRealm realm)

Method Detail

retrieveUser

protected org.acegisecurity.userdetails.UserDetails retrieveUser(String username,
                                                     org.acegisecurity.providers.UsernamePasswordAuthenticationToken authentication)
                                                          throws org.acegisecurity.AuthenticationException

Description copied from class: AbstractActiveDirectoryAuthenticationProvider

Authenticates the user (if authentication!=null), or retrieve the user name information (otherwise.)

Specified by:

retrieveUser in class AbstractActiveDirectoryAuthenticationProvider

Throws:

org.acegisecurity.AuthenticationException

canRetrieveUserByName

protected boolean canRetrieveUserByName()

Description copied from class: AbstractActiveDirectoryAuthenticationProvider

Returns true if we can retrieve user just from the name without supplying any credential.

Specified by:

canRetrieveUserByName in class AbstractActiveDirectoryAuthenticationProvider

retrieveUser

public org.acegisecurity.userdetails.UserDetails retrieveUser(String username,
                                                     String password,
                                                     String domainName,
                                                     List<SocketInfo> ldapServers)

Authenticates and retrieves the user by using the given list of available AD LDAP servers.

Parameters:

password - If this is NO_AUTHENTICATION, the authentication is not performed, and just the retrieval would happen.

Returns:

never null

Throws:

org.acegisecurity.userdetails.UsernameNotFoundException - The user didn't exist.

loadGroupByGroupname

public hudson.security.GroupDetails loadGroupByGroupname(String groupname)