org.jboss.security.xacml.locators.policy

Class JBossLDAPPolicyLocator

java.lang.Object

org.jboss.security.xacml.locators.AbstractJBossPolicyLocator

org.jboss.security.xacml.locators.policy.JBossLDAPPolicyLocator

All Implemented Interfaces:

AbstractLocator, ContextMapOp, PolicyLocator

public class JBossLDAPPolicyLocator
extends AbstractJBossPolicyLocator

A PolicyLocator that searches for XACML policies and policy sets stored in an attribute of LDAP entries The attribute contains the XACML policy as if the xml would be converted to a String. This PolicyLocator is configured with the following options: url - The LDAP server URL to connect to factory - The JNDI factory that is JDK specific such as "com.sun.jndi.ldap.LdapCtxFactory" username - The username to connect to the LDAP server. This user must have search privileges password - The password of the user to connect to the LDAP server filter - The search filter to be used to find the entries that have a policy attribute - The name of the entry's attribute containing the XACML policy in the xml format searchScope - Scope of the search for entries. Default is SUBTREE searchTimeLimit - Search time limit. Default is 10000 (10 seconds) The password value can be masked using PBE. To create a masked password invoke org.jboss.security.xacml.util.PBEUtils salt iterationCount password When using a masked password add also the options salt - the 8 character String iterationCount - an integer Those options must have the same value used for encryption.

Version:

$Revision: 1 $

Author:

Marcus Moyses, Anil.Saldhana@redhat.com

Field Summary

Fields

Modifier and Type	Field and Description
protected LDAPCommon	ldapCommon
protected static Logger	log

Fields inherited from class org.jboss.security.xacml.locators.AbstractJBossPolicyLocator

map, options, pfml, policies

Fields inherited from interface org.jboss.security.xacml.interfaces.AbstractLocator

ATTRIBUTE_DESIGNATOR_INTEGER_TAG, ATTRIBUTE_DESIGNATOR_SUPPORT_TAG, ATTRIBUTE_SELECTOR_SUPPORT_TAG, ATTRIBUTE_SUPPORTED_ID_TAG, IDENTIFIER_TAG, RESOURCE_CHILD_SUPPORTED_TAG, RESOURCE_DESCENDANT_SUPPORTED_TAG

Constructor Summary

Constructors

Constructor and Description
JBossLDAPPolicyLocator()

Method Summary

Methods

Modifier and Type	Method and Description
protected void	init()
protected void	search()
void	setOptions(List<Option> theoptions) Set a list of options on the locator
void	setPolicies(Set<XACMLPolicy> policies) Set of policies that this locator is able to return

Methods inherited from class org.jboss.security.xacml.locators.AbstractJBossPolicyLocator

get, getPolicies, set

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected static Logger log

ldapCommon

protected LDAPCommon ldapCommon

Constructor Detail

JBossLDAPPolicyLocator

public JBossLDAPPolicyLocator()

Method Detail

setPolicies

public void setPolicies(Set<XACMLPolicy> policies)

Description copied from interface: PolicyLocator

Set of policies that this locator is able to return

Specified by:

setPolicies in interface PolicyLocator

Specified by:

setPolicies in class AbstractJBossPolicyLocator

See Also:

PolicyLocator.setPolicies(Set)

setOptions

public void setOptions(List<Option> theoptions)

Description copied from interface: AbstractLocator

Set a list of options on the locator

Specified by:

setOptions in interface AbstractLocator

Overrides:

setOptions in class AbstractJBossPolicyLocator

See Also:

AbstractLocator.setOptions(List)

init

protected void init()

search

protected void search()