org.jboss.security.negotiation.net

Class SPNEGOServerSocket

java.lang.Object

java.net.ServerSocket

org.jboss.security.negotiation.net.SPNEGOServerSocket

All Implemented Interfaces:

Closeable, AutoCloseable

public class SPNEGOServerSocket
extends ServerSocket

An implementation of ServerSocket that tries to establish a GSSContext when a Socket connects to it.

Version:

$Revision: 1 $

Author:

Marcus Moyses

Constructor Summary

Constructors

Constructor and Description
SPNEGOServerSocket()
SPNEGOServerSocket(int port)
SPNEGOServerSocket(int port, int backlog)
SPNEGOServerSocket(int port, int backlog, InetAddress bindAddr)

Method Summary

Methods

Modifier and Type	Method and Description
Socket	accept() Tries to establish a GSSContext with the client using the tokens provided.
protected void	acceptSocket(Socket socket, NegotiationContext negotiationContext) Accepts a Socket connection by trying to do a JAAS Kerberos login using the tokens exchanged with the client.
void	close()
protected void	flushPrincipalFromCache(Principal principal, String securityDomain) Removes the user entry from the authentication cache.
protected Principal	getClientPrincipal(byte[] ticket, Subject subject) Decodes and parses the ticket to retrieve the client Principal.
String	getHostSecurityDomain() Returns the Kerberos security domain.
String	getSecurityDomain() Returns the security domain securing the EJBs.
protected boolean	isValid(Principal principal, Object credential, String securityDomain) Performs a JAAS login.
protected Subject	login() Performs a JAAS login on the client side.
protected void	logout() Performs a JAAS logout on the client side.
void	setHostSecurityDomain(String hostSecurityDomain) Sets the Kerberos security domain.
void	setSecurityDomain(String securityDomain) Sets the security domain securing the EJBs.

Methods inherited from class java.net.ServerSocket

bind, bind, getChannel, getInetAddress, getLocalPort, getLocalSocketAddress, getReceiveBufferSize, getReuseAddress, getSoTimeout, implAccept, isBound, isClosed, setPerformancePreferences, setReceiveBufferSize, setReuseAddress, setSocketFactory, setSoTimeout, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

SPNEGOServerSocket

public SPNEGOServerSocket()
                   throws IOException

Throws:

IOException

See Also:

ServerSocket.ServerSocket()

SPNEGOServerSocket

public SPNEGOServerSocket(int port)
                   throws IOException

Throws:

IOException

See Also:

ServerSocket.ServerSocket(int)

SPNEGOServerSocket

public SPNEGOServerSocket(int port,
                  int backlog)
                   throws IOException

Throws:

IOException

See Also:

ServerSocket.ServerSocket(int, int)

SPNEGOServerSocket

public SPNEGOServerSocket(int port,
                  int backlog,
                  InetAddress bindAddr)
                   throws IOException

Throws:

IOException

See Also:

ServerSocket.ServerSocket(int, int, InetAddress)

Method Detail

accept

public Socket accept()
              throws IOException

Tries to establish a GSSContext with the client using the tokens provided.

Overrides:

accept in class ServerSocket

Throws:

IOException

See Also:

ServerSocket.accept()

close

public void close()
           throws IOException

Specified by:

close in interface Closeable

Specified by:

close in interface AutoCloseable

Overrides:

close in class ServerSocket

Throws:

IOException

See Also:

ServerSocket.close()

acceptSocket

protected void acceptSocket(Socket socket,
                NegotiationContext negotiationContext)
                     throws Exception

Accepts a Socket connection by trying to do a JAAS Kerberos login using the tokens exchanged with the client.

Parameters:

socket - Client Socket

negotiationContext - NegotiationContext to be used for the JAAS login

Throws:

IOException

NegotiationException

NamingException

Exception

isValid

protected boolean isValid(Principal principal,
              Object credential,
              String securityDomain)
                   throws Exception

Performs a JAAS login.

Parameters:

principal - User Principal to login

credential - Credentials of the user

securityDomain - Name of the JAAS security domain

Returns:

true if authentication succeeds, false otherwise

Throws:

Exception - if an error occurs

flushPrincipalFromCache

protected void flushPrincipalFromCache(Principal principal,
                           String securityDomain)
                                throws Exception

Removes the user entry from the authentication cache.

Parameters:

principal - User Principal to remove from cache

securityDomain - Name of the JAAS security domain

Throws:

Exception - if an error occurs

getSecurityDomain

public String getSecurityDomain()

Returns the security domain securing the EJBs.

Returns:

name of the security domain

setSecurityDomain

public void setSecurityDomain(String securityDomain)

Sets the security domain securing the EJBs.

Parameters:

securityDomain - name of the security domain

getHostSecurityDomain

public String getHostSecurityDomain()

Returns the Kerberos security domain.

Returns:

name of the security domain

setHostSecurityDomain

public void setHostSecurityDomain(String hostSecurityDomain)

Sets the Kerberos security domain.

Parameters:

hostSecurityDomain - name of the security domain

login

protected Subject login()
                 throws LoginException

Performs a JAAS login on the client side.

Returns:

a Subject

Throws:

LoginException - if the login fails

logout

protected void logout()
               throws LoginException

Performs a JAAS logout on the client side.

Throws:

LoginException - if the logout fails

getClientPrincipal

protected Principal getClientPrincipal(byte[] ticket,
                           Subject subject)

Decodes and parses the ticket to retrieve the client Principal.

Parameters:

ticket - Kerberos ticket

subject - Subject containing the server private key

Returns:

client Principal