org.alfresco.filesys.auth.cifs

Class PassthruCifsAuthenticator

java.lang.Object

org.alfresco.jlan.server.auth.CifsAuthenticator

org.alfresco.filesys.auth.cifs.CifsAuthenticatorBase

org.alfresco.filesys.auth.cifs.PassthruCifsAuthenticator

All Implemented Interfaces:

ICifsAuthenticator, SessionListener, ActivateableBean, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean

public class PassthruCifsAuthenticator
extends CifsAuthenticatorBase
implements SessionListener

Passthru Authenticator Class

Authenticate users accessing the CIFS server by validating the user against a domain controller or other server on the network.

Author:

GKSpencer

Field Summary

Fields

Modifier and Type	Field and Description
static int	DefaultSessionTmo
static int	MaxCheckInterval
static int	MaxSessionTmo
static int	MinCheckInterval
static int	MinSessionTmo
static long	PassthruKeepAliveInterval

Fields inherited from class org.alfresco.filesys.auth.cifs.CifsAuthenticatorBase

m_md4Encoder

Fields inherited from class org.alfresco.jlan.server.auth.CifsAuthenticator

GUEST_USERNAME, m_config, m_random

Fields inherited from interface org.alfresco.jlan.server.auth.ICifsAuthenticator

AUTH_ACCDISABLED, AUTH_ALLOW, AUTH_BADPASSWORD, AUTH_BADUSER, AUTH_DISALLOW, AUTH_GUEST, AUTH_PASSEXPIRED, LANMAN, NoAccess, NTLM1, NTLM2, ReadOnly, SHARE_MODE, STANDARD_CHALLENGE_LEN, STANDARD_PASSWORD_LEN, USER_MODE, Writeable

Constructor Summary

Constructors

Constructor and Description
PassthruCifsAuthenticator() Passthru Authenticator Constructor

Method Summary

Methods

Modifier and Type	Method and Description
int	authenticateShareConnect(ClientInfo client, SharedDevice share, String sharePwd, SrvSession sess) Authenticate the connection to a particular share, called when the SMB server is in share security mode
int	authenticateUser(ClientInfo client, SrvSession sess, int alg) Authenticate a session setup by a user
void	closeAuthenticator() Close the authenticator, perform cleanup
void	generateNegotiateResponse(SMBSrvSession sess, SMBSrvPacket respPkt, boolean extendedSecurity) Generate the CIFS negotiate response packet, the authenticator should add authentication specific fields to the response.
AuthContext	getAuthContext(SMBSrvSession sess) Return an authentication context for the new session
int	getServerCapabilities() Return the server capability flags
Hashtable<String,PassthruDetails>	getSessions()
void	initialize(ServerConfiguration config, org.springframework.extensions.config.ConfigElement params) Initialize the authenticator via the config service
void	processAlfrescoSessionSetup(SMBSrvSession sess, SMBSrvPacket reqPkt) Process the CIFS session setup request packet and build the session setup response
void	processSessionSetup(SMBSrvSession sess, SMBSrvPacket reqPkt) Process the CIFS session setup request packet and build the session setup response.
void	sessionClosed(SrvSession sess) SMB server session closed notification
void	sessionCreated(SrvSession sess) SMB server session created notification
void	sessionLoggedOn(SrvSession sess) User successfully logged on notification
void	setPassthruServers(PassthruServers servers)
protected boolean	validateAuthenticationMode() Validate that the authentication component supports the required mode.

Methods inherited from class org.alfresco.filesys.auth.cifs.CifsAuthenticatorBase

afterPropertiesSet, checkForAdminUserName, destroy, doGuestLogon, doInTransaction, getAuthenticationComponent, getAuthenticationService, getAuthorityService, getHomeFolderForUser, getNodeService, getNTLMAuthenticator, getPersonService, initialize, isActive, mapUserNameToPerson, setActive, setAuthenticationComponent, setAuthenticationService, setAuthorityService, setCurrentUser, setDiskInterface, setNodeService, setPersonService, setTransactionService

Methods inherited from class org.alfresco.jlan.server.auth.CifsAuthenticator

allowGuest, authenticateUserPlainText, convertPassword, generateEncryptedPassword, getAccessMode, getCIFSConfig, getEnabledDialects, getEncryptionKeyLength, getEncryptor, getGuestUserName, getsecurityConfig, getSecurityMode, getStatusAsString, getUserDetails, hasDebug, hasExtendedSecurity, hasSessionCleanup, mapClientAddressToDomain, mapUnknownUserToGuest, setAccessMode, setAllowGuest, setConfig, setDebug, setExtendedSecurity, setGuestUserName, setMapToGuest, setSecurityMode, setSessionCleanup, toString, validatePassword

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

DefaultSessionTmo

public static final int DefaultSessionTmo

See Also:

Constant Field Values

MinSessionTmo

public static final int MinSessionTmo

See Also:

Constant Field Values

MaxSessionTmo

public static final int MaxSessionTmo

See Also:

Constant Field Values

MinCheckInterval

public static final int MinCheckInterval

See Also:

Constant Field Values

MaxCheckInterval

public static final int MaxCheckInterval

See Also:

Constant Field Values

PassthruKeepAliveInterval

public static final long PassthruKeepAliveInterval

See Also:

Constant Field Values

Constructor Detail

PassthruCifsAuthenticator

public PassthruCifsAuthenticator()

Passthru Authenticator Constructor

Default to user mode security with encrypted password support.

Method Detail

getSessions

public Hashtable<String,PassthruDetails> getSessions()

setPassthruServers

public void setPassthruServers(PassthruServers servers)

authenticateShareConnect

public int authenticateShareConnect(ClientInfo client,
                           SharedDevice share,
                           String sharePwd,
                           SrvSession sess)

Authenticate the connection to a particular share, called when the SMB server is in share security mode

Specified by:

authenticateShareConnect in interface ICifsAuthenticator

Overrides:

authenticateShareConnect in class CifsAuthenticator

Parameters:

client - ClientInfo

share - SharedDevice

sharePwd - String

sess - SrvSession

Returns:

int

authenticateUser

public int authenticateUser(ClientInfo client,
                   SrvSession sess,
                   int alg)

Authenticate a session setup by a user

Specified by:

authenticateUser in interface ICifsAuthenticator

Overrides:

authenticateUser in class CifsAuthenticator

Parameters:

client - ClientInfo

sess - SrvSession

alg - int

Returns:

int

getAuthContext

public AuthContext getAuthContext(SMBSrvSession sess)

Return an authentication context for the new session

Overrides:

getAuthContext in class CifsAuthenticator

Returns:

AuthContext

generateNegotiateResponse

public void generateNegotiateResponse(SMBSrvSession sess,
                             SMBSrvPacket respPkt,
                             boolean extendedSecurity)
                               throws AuthenticatorException

Generate the CIFS negotiate response packet, the authenticator should add authentication specific fields to the response.

Specified by:

generateNegotiateResponse in interface ICifsAuthenticator

Overrides:

generateNegotiateResponse in class CifsAuthenticator

Parameters:

sess - SMBSrvSession

respPkt - SMBSrvPacket

extendedSecurity - boolean

Throws:

AuthenticatorException

processSessionSetup

public void processSessionSetup(SMBSrvSession sess,
                       SMBSrvPacket reqPkt)
                         throws SMBSrvException

Process the CIFS session setup request packet and build the session setup response.

This is the boundary between alfresco and JLAN. So is responsible for logging and ensuring that the exceptions are correct for JLAN.

Specified by:

processSessionSetup in interface ICifsAuthenticator

Overrides:

processSessionSetup in class CifsAuthenticator

Parameters:

sess - SMBSrvSession

reqPkt - SMBSrvPacket

Throws:

SMBSrvException

processAlfrescoSessionSetup

public void processAlfrescoSessionSetup(SMBSrvSession sess,
                               SMBSrvPacket reqPkt)
                                 throws SMBSrvException

Process the CIFS session setup request packet and build the session setup response

Parameters:

sess - SMBSrvSession

reqPkt - SMBSrvPacket

Throws:

SMBSrvException

validateAuthenticationMode

protected boolean validateAuthenticationMode()

Description copied from class: CifsAuthenticatorBase

Validate that the authentication component supports the required mode.

Overrides:

validateAuthenticationMode in class CifsAuthenticatorBase

Returns:

boolean

initialize

public void initialize(ServerConfiguration config,
              org.springframework.extensions.config.ConfigElement params)
                throws InvalidConfigurationException

Initialize the authenticator via the config service

Overrides:

initialize in class CifsAuthenticatorBase

Parameters:

config - ServerConfiguration

params - ConfigElement

Throws:

InvalidConfigurationException

getServerCapabilities

public int getServerCapabilities()

Return the server capability flags

Specified by:

getServerCapabilities in interface ICifsAuthenticator

Overrides:

getServerCapabilities in class CifsAuthenticator

Returns:

int

closeAuthenticator

public void closeAuthenticator()

Close the authenticator, perform cleanup

Specified by:

closeAuthenticator in interface ICifsAuthenticator

Overrides:

closeAuthenticator in class CifsAuthenticator

sessionClosed

public void sessionClosed(SrvSession sess)

SMB server session closed notification

Specified by:

sessionClosed in interface SessionListener

Parameters:

sess - SrvSession

sessionCreated

public void sessionCreated(SrvSession sess)

SMB server session created notification

Specified by:

sessionCreated in interface SessionListener

Parameters:

sess - SrvSession

sessionLoggedOn

public void sessionLoggedOn(SrvSession sess)

User successfully logged on notification

Specified by:

sessionLoggedOn in interface SessionListener

Parameters:

sess - SrvSession