Package com.sshtools.common.auth

Class OpenSshCertificateAuthenticationProvider

java.lang.Object

com.sshtools.common.auth.OpenSshCertificateAuthenticationProvider

All Implemented Interfaces:

Authenticator, PublicKeyAuthenticationProvider

public class OpenSshCertificateAuthenticationProvider
extends Object
implements PublicKeyAuthenticationProvider

Constructor Summary

Constructors

Constructor	Description
OpenSshCertificateAuthenticationProvider(SshPublicKey... caPublicKey)
OpenSshCertificateAuthenticationProvider(Collection<SshPublicKey> caPublicKeys)

Method Summary

Modifier and Type	Method	Description
void	add(SshPublicKey key, String comment, SshConnection con)
void	addCAKey(SshPublicKey caKey)
boolean	checkKey(SshPublicKey key, SshConnection con)
Iterator<SshPublicKeyFile>	getKeys(SshConnection con)
boolean	isAuthorizedKey(SshPublicKey key, SshConnection con)	Check the supplied public key against the users authorized keys.
void	remove(SshPublicKey key, SshConnection con)
void	removeKey(SshPublicKey caKey)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

OpenSshCertificateAuthenticationProvider

public OpenSshCertificateAuthenticationProvider(SshPublicKey... caPublicKey)

OpenSshCertificateAuthenticationProvider

public OpenSshCertificateAuthenticationProvider(Collection<SshPublicKey> caPublicKeys)

Method Details

addCAKey

public void addCAKey(SshPublicKey caKey)
              throws SshException

Throws:

SshException

removeKey

public void removeKey(SshPublicKey caKey)

isAuthorizedKey

public boolean isAuthorizedKey(SshPublicKey key,
 SshConnection con)
                        throws IOException

Description copied from interface: PublicKeyAuthenticationProvider

Check the supplied public key against the users authorized keys. The actual verification of the key is performed by the server, you only need to return a value to indicate whether the key is authorized or not. You can obtain the username, home directory, group or remote socket address from the com.sshtools.common.auth.server.PasswordAuthenticationProvider instance.

If your authorized key database is kept on the native file system you can obtain and initialize an instance as follows:

 NativeFileSystemProvider nfs = (NativeFileSystemProvider) authenticationProvider
                .getContext().getFileSystemProvider().newInstance();
 
 nfs.init(sessionid, null, authenticationProvider.getContext());
 

Don't forget to close any file handles and the file system once you've done accessing files.

Specified by:

isAuthorizedKey in interface PublicKeyAuthenticationProvider

Parameters:

key - SshPublicKey

con - connection

Returns:

boolean true if the key is an authorized key, otherwise false

Throws:

IOException

getKeys

public Iterator<SshPublicKeyFile> getKeys(SshConnection con)
                                   throws PermissionDeniedException,
IOException

Specified by:

getKeys in interface PublicKeyAuthenticationProvider

Throws:

PermissionDeniedException

IOException

remove

public void remove(SshPublicKey key,
 SshConnection con)
            throws IOException,
PermissionDeniedException,
SshException

Specified by:

remove in interface PublicKeyAuthenticationProvider

Throws:

IOException

PermissionDeniedException

SshException

add

public void add(SshPublicKey key,
 String comment,
 SshConnection con)
         throws IOException,
PermissionDeniedException,
SshException

Specified by:

add in interface PublicKeyAuthenticationProvider

Throws:

IOException

PermissionDeniedException

SshException

checkKey

public boolean checkKey(SshPublicKey key,
 SshConnection con)
                 throws IOException

Specified by:

checkKey in interface PublicKeyAuthenticationProvider

Throws:

IOException