hudson.plugins.active_directory

Class ActiveDirectoryUnixAuthenticationProvider

java.lang.Object

hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider

All Implemented Interfaces:

GroupDetailsService, org.acegisecurity.userdetails.UserDetailsService

public class ActiveDirectoryUnixAuthenticationProvider
extends AbstractActiveDirectoryAuthenticationProvider

AuthenticationProvider with Active Directory, through LDAP.

Author:

Kohsuke Kawaguchi, James Nord

Field Summary

Fields

Modifier and Type	Field and Description
protected static String	DN_FORMATTED
protected hudson.plugins.active_directory.TlsConfiguration	tlsConfiguration Deprecated.

Constructor Summary

Constructors

Constructor and Description
ActiveDirectoryUnixAuthenticationProvider(ActiveDirectorySecurityRealm realm)

Method Summary

Modifier and Type	Method and Description
GroupDetails	loadGroupByGroupname(String groupname)
org.acegisecurity.userdetails.UserDetails	retrieveUser(String username, String password, ActiveDirectoryDomain domain, List<SocketInfo> ldapServers) Authenticates and retrieves the user by using the given list of available AD LDAP servers.
protected org.acegisecurity.userdetails.UserDetails	retrieveUser(String username, org.acegisecurity.providers.UsernamePasswordAuthenticationToken authentication) Authenticates the user (if authentication!=null), or retrieve the user name information (otherwise.)

Methods inherited from class hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

additionalAuthenticationChecks, loadUserByUsername

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DN_FORMATTED

protected static final String DN_FORMATTED

See Also:

Constant Field Values

tlsConfiguration

@Deprecated
protected hudson.plugins.active_directory.TlsConfiguration tlsConfiguration

Deprecated.

Selects the SSL strategy to follow on the TLS connections

Even if we are not using any of the TLS ports (3269/636) the plugin will try to establish a TLS channel using startTLS. Because of this, we need to be able to specify the SSL strategy on the plugin

For the moment there are two possible values: trustAllCertificates and trustStore.

Constructor Detail

ActiveDirectoryUnixAuthenticationProvider

public ActiveDirectoryUnixAuthenticationProvider(ActiveDirectorySecurityRealm realm)

Method Detail

retrieveUser

protected org.acegisecurity.userdetails.UserDetails retrieveUser(String username,
                                                                 org.acegisecurity.providers.UsernamePasswordAuthenticationToken authentication)
                                                          throws org.acegisecurity.AuthenticationException

Description copied from class: AbstractActiveDirectoryAuthenticationProvider

Authenticates the user (if authentication!=null), or retrieve the user name information (otherwise.)

Specified by:

retrieveUser in class AbstractActiveDirectoryAuthenticationProvider

Throws:

org.acegisecurity.AuthenticationException

retrieveUser

public org.acegisecurity.userdetails.UserDetails retrieveUser(String username,
                                                              String password,
                                                              ActiveDirectoryDomain domain,
                                                              List<SocketInfo> ldapServers)
                                                       throws NamingException

Authenticates and retrieves the user by using the given list of available AD LDAP servers.

Parameters:

password - If this is NO_AUTHENTICATION, the authentication is not performed, and just the retrieval would happen.

Returns:

never null

Throws:

org.acegisecurity.userdetails.UsernameNotFoundException - The user didn't exist.

NamingException

loadGroupByGroupname

public GroupDetails loadGroupByGroupname(String groupname)