gov.lanl.Authenticator
Class AuthenticatorImpl

java.lang.Object
  |
  +--org.omg.PortableServer.Servant
        |
        +--gov.lanl.Authenticate.AuthenticatorPOA
              |
              +--gov.lanl.Authenticator.AuthenticatorImpl

All Implemented Interfaces:

gov.lanl.Authenticate.AuthenticatorOperations, org.omg.CORBA.portable.InvokeHandler

public class AuthenticatorImpl

extends gov.lanl.Authenticate.AuthenticatorPOA

This implementation provides transient support for checking the authentication for a single user or a list of users. It can either make the decision or defer to a service, such as "SecureID" service; it may also keep a time dependent transient list to support one time sign on via secure cards or time restricted passwords. It expects to see data as GSSUP's InitialContextToken which is: struct InitialContextToken { CSI::UTF8String username; CSI::UTF8String password; CSI::GSS_NT_ExportedName target_name; typedef sequence GSS_NT_ExportedName;

Constructor Summary

AuthenticatorImpl()

Method Summary

boolean[]	areUsersOk(org.omg.GSSUP.InitialContextToken[] userTokenSeq) Check to see if the users are or can be authenticated; authenticate each user as necessary.
boolean	isUserOk(org.omg.GSSUP.InitialContextToken userToken) Check to see if a user is or can be authenticated; authenticate the user if possible.
boolean	isUserOkFromCredentials() Check to see if a user is or can be authenticated; authenticate the user if possible.
void	logoffUser(org.omg.GSSUP.InitialContextToken userToken) Logoff the user; i.e. forget that the user had been previously authenticated.
void	logoffUserFromCredentials() Logoff the user; i.e. forget that the user had been previously authenticated.
void	setUserList(gov.lanl.Authenticator.UserListInterface inUserList) Sets the local user list to use.

Methods inherited from class gov.lanl.Authenticate.AuthenticatorPOA

_all_interfaces, _invoke, _this, _this

Methods inherited from class org.omg.PortableServer.Servant

_default_POA, _get_delegate, _get_interface_def, _is_a, _non_existent, _object_id, _orb, _poa, _set_delegate, _this_object, _this_object

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthenticatorImpl

public AuthenticatorImpl()

Method Detail

isUserOk

public boolean isUserOk(org.omg.GSSUP.InitialContextToken userToken)

Check to see if a user is or can be authenticated; authenticate the user if possible.

Parameters:

userToken - is the user information to use for authentication, and consists of name, password and target_name.

Returns:

true if the user is authenticated.

isUserOkFromCredentials

public boolean isUserOkFromCredentials()

Check to see if a user is or can be authenticated; authenticate the user if possible. User information to use for authentication is assumed to be in the security credentials of the connection.

Returns:

true if the user is authenticated.

areUsersOk

public boolean[] areUsersOk(org.omg.GSSUP.InitialContextToken[] userTokenSeq)

Check to see if the users are or can be authenticated; authenticate each user as necessary.

Parameters:

userTokenSeq - is a sequence of user information to use for authentication, and consists of name, password and target_name for each user.

Returns:

a sequence of booleans for the user list, each element specifiying if the corresponding element in the userTokenSeq is authenticated.

setUserList

public void setUserList(gov.lanl.Authenticator.UserListInterface inUserList)

Sets the local user list to use.

Parameters:

inUserList - is a particular user list implementation to use

logoffUser

public void logoffUser(org.omg.GSSUP.InitialContextToken userToken)

Logoff the user; i.e. forget that the user had been previously authenticated.

Parameters:

userToken - is the user data uniquely identifying the user to be logged off.

logoffUserFromCredentials

public void logoffUserFromCredentials()

Logoff the user; i.e. forget that the user had been previously authenticated. User information to identify the user to log off is assumed to be in the security credentials of the connection.