Package org.apereo.cas.authentication.handler.support.jaas

Class JaasAuthenticationHandler

java.lang.Object

org.apereo.cas.authentication.AbstractAuthenticationHandler

org.apereo.cas.authentication.handler.support.AbstractPreAndPostProcessingAuthenticationHandler

org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler

org.apereo.cas.authentication.handler.support.jaas.JaasAuthenticationHandler

All Implemented Interfaces:

org.apereo.cas.authentication.AuthenticationHandler, org.apereo.cas.authentication.PrePostAuthenticationHandler, org.apereo.cas.util.NamedObject, org.springframework.core.Ordered

public class JaasAuthenticationHandler
extends AbstractUsernamePasswordAuthenticationHandler

JAAS Authentication Handler for CAS. This is a simple bridge from CAS' authentication to JAAS.

Using the JAAS Authentication Handler requires you to configure the appropriate JAAS modules. You can specify the location of a jass.conf file using the following VM parameter: <pre> -Djava.security.auth.login.config=$PATH_TO_JAAS_CONF/jaas.conf </pre>

This example jaas.conf would try Kerberos based authentication, then try LDAP authentication: <pre> CAS { com.sun.security.auth.module.Krb5LoginModule sufficient client=TRUE debug=FALSE useTicketCache=FALSE; edu.uconn.netid.jaas.LDAPLoginModule sufficient java.naming.provider.url="ldap://ldapserver.my.edu:389/dc=my,dc=edu" java.naming.security.principal="uid=jaasauth,dc=my,dc=edu" java.naming.security.credentials="password" Attribute="uid" startTLS="true"; }; </pre>

Since:

3.0.0

See Also:

• CallbackHandler
• PasswordCallback
• NameCallback

Field Summary

Fields inherited from interface org.apereo.cas.authentication.AuthenticationHandler

SUCCESSFUL_AUTHENTICATION_HANDLERS

Fields inherited from interface org.springframework.core.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Constructor Summary

Constructors

Constructor	Description
JaasAuthenticationHandler(String name, org.apereo.cas.services.ServicesManager servicesManager, org.apereo.cas.authentication.principal.PrincipalFactory principalFactory, Integer order)	Instantiates a new Jaas authentication handler, and attempts to load/verify the configuration.

Method Summary

Modifier and Type	Method	Description
void	setKerberosKdcSystemProperty(String kerberosKdcSystemProperty)	System property value to overwrite the kdc in krb5 config.
void	setKerberosRealmSystemProperty(String kerberosRealmSystemProperty)	System property value to overwrite the realm in krb5 config.
void	setLoginConfigType(String loginConfigType)
void	setLoginConfigurationFile(File loginConfigurationFile)
void	setRealm(String realm)	The realm that contains the login module information.

Methods inherited from class org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler

getPasswordEncoder, getPasswordPolicyConfiguration, getPasswordPolicyHandlingStrategy, getPrincipalNameTransformer, setPasswordEncoder, setPasswordPolicyConfiguration, setPasswordPolicyHandlingStrategy, setPrincipalNameTransformer, supports, supports

Methods inherited from class org.apereo.cas.authentication.handler.support.AbstractPreAndPostProcessingAuthenticationHandler

authenticate

Methods inherited from class org.apereo.cas.authentication.AbstractAuthenticationHandler

equals, getCredentialSelectionPredicate, getName, getOrder, getPrincipalFactory, getServicesManager, getState, hashCode, setCredentialSelectionPredicate, setState

Methods inherited from class java.lang.Object

getClass, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apereo.cas.authentication.AuthenticationHandler

getOrder, getState

Methods inherited from interface org.apereo.cas.util.NamedObject

getName

Methods inherited from interface org.apereo.cas.authentication.PrePostAuthenticationHandler

postAuthenticate, preAuthenticate

Constructor Details

JaasAuthenticationHandler

public JaasAuthenticationHandler(String name,
 org.apereo.cas.services.ServicesManager servicesManager,
 org.apereo.cas.authentication.principal.PrincipalFactory principalFactory,
 Integer order)

Instantiates a new Jaas authentication handler, and attempts to load/verify the configuration.

Parameters:

name - the name

servicesManager - the services manager

principalFactory - the principal factory

order - the order

Method Details

setRealm

public void setRealm(String realm)

The realm that contains the login module information.

setKerberosRealmSystemProperty

public void setKerberosRealmSystemProperty(String kerberosRealmSystemProperty)

System property value to overwrite the realm in krb5 config.

setKerberosKdcSystemProperty

public void setKerberosKdcSystemProperty(String kerberosKdcSystemProperty)

System property value to overwrite the kdc in krb5 config.

setLoginConfigType

public void setLoginConfigType(String loginConfigType)

setLoginConfigurationFile

public void setLoginConfigurationFile(File loginConfigurationFile)