Package org.wildfly.security.auth.realm.ldap

Class DirectEvidenceVerifier

java.lang.Object

org.wildfly.security.auth.realm.ldap.DirectEvidenceVerifier

All Implemented Interfaces:

EvidenceVerifier

class DirectEvidenceVerifier
extends Object
implements EvidenceVerifier

An EvidenceVerifier that verifies a guess by using it to connect to LDAP.

Author:

Darran Lofthouse

Field Summary

Fields

Modifier and Type	Field	Description
private boolean	allowBlankPassword

Constructor Summary

Constructors

Constructor	Description
DirectEvidenceVerifier(boolean allowBlankPassword)

Method Summary

Modifier and Type	Method	Description
IdentityEvidenceVerifier	forIdentity(DirContext dirContext, String distinguishedName, String url, Attributes attributes)	Obtain an IdentityEvidenceVerifier to verify the evidence for a specific identity.
SupportLevel	getEvidenceVerifySupport(Class<? extends Evidence> evidenceType, String algorithmName)	Get the SupportLevel for the level of evidence validation support for the named credential.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.wildfly.security.auth.realm.ldap.EvidenceVerifier

addBinaryIdentityAttributes, addRequiredIdentityAttributes, forIdentity

Field Detail

allowBlankPassword

private final boolean allowBlankPassword

Constructor Detail

DirectEvidenceVerifier

DirectEvidenceVerifier(boolean allowBlankPassword)

Method Detail

getEvidenceVerifySupport

public SupportLevel getEvidenceVerifySupport(Class<? extends Evidence> evidenceType,
                                             String algorithmName)
                                      throws RealmUnavailableException

Description copied from interface: EvidenceVerifier

Get the SupportLevel for the level of evidence validation support for the named credential.

Specified by:

getEvidenceVerifySupport in interface EvidenceVerifier

Parameters:

evidenceType - the evidence type (must not be null)

algorithmName - the evidence algorithm name or null if none

Returns:

the level of support for the named credential

Throws:

RealmUnavailableException - if the realm is currently unable to handle requests

forIdentity

public IdentityEvidenceVerifier forIdentity(DirContext dirContext,
                                            String distinguishedName,
                                            String url,
                                            Attributes attributes)
                                     throws RealmUnavailableException

Description copied from interface: EvidenceVerifier

Obtain an IdentityEvidenceVerifier to verify the evidence for a specific identity. Note: By this point referrals relating to the identity should have been resolved so the DirContextFactory should be suitable for use with the supplied distinguishedName

Specified by:

forIdentity in interface EvidenceVerifier

Parameters:

dirContext - the DirContext to use to connect to LDAP.

distinguishedName - the distinguished name of the identity entry.

url - the absolute distinguished name of identity LDAP entry as URL string (when identity is not in realm context)

attributes - the identity attributes requested by EvidenceVerifier.addRequiredIdentityAttributes(Collection).

Returns:

An IdentityEvidenceVerifier for the specified identity identified by their distinguished name.

Throws:

RealmUnavailableException