org.apache.directory.server.ldap.handlers.bind
Class DigestMd5CallbackHandler

java.lang.Object
  org.apache.directory.server.ldap.handlers.bind.AbstractSaslCallbackHandler
      org.apache.directory.server.ldap.handlers.bind.DigestMd5CallbackHandler

All Implemented Interfaces:

javax.security.auth.callback.CallbackHandler

public class DigestMd5CallbackHandler
extends AbstractSaslCallbackHandler

Version:

$Rev$, $Date$

Author:

Apache Directory Project

Field Summary

Fields inherited from class org.apache.directory.server.ldap.handlers.bind.AbstractSaslCallbackHandler

directoryService

Constructor Summary

DigestMd5CallbackHandler(DirectoryService directoryService, org.apache.mina.common.IoSession session, org.apache.directory.shared.ldap.message.BindRequest bindRequest)
Creates a new instance of DigestMd5CallbackHandler.

Method Summary

protected void	authorize(javax.security.sasl.AuthorizeCallback authorizeCB) Final check to authorize user.
protected java.lang.String	lookupPassword(java.lang.String username, java.lang.String realm) Implementors set the password based on a lookup, using the username and realm as keys.

Methods inherited from class org.apache.directory.server.ldap.handlers.bind.AbstractSaslCallbackHandler

getContext, getEnvironment, getRealm, getUsername, handle

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DigestMd5CallbackHandler

public DigestMd5CallbackHandler(DirectoryService directoryService,
                                org.apache.mina.common.IoSession session,
                                org.apache.directory.shared.ldap.message.BindRequest bindRequest)

Creates a new instance of DigestMd5CallbackHandler.

Parameters:

session - the mina IoSession

bindRequest - the bind message

directoryService - the directory service core

Method Detail

lookupPassword

protected java.lang.String lookupPassword(java.lang.String username,
                                          java.lang.String realm)

Description copied from class: AbstractSaslCallbackHandler

Implementors set the password based on a lookup, using the username and realm as keys.

• For DIGEST-MD5, lookup password based on username and realm.
• For CRAM-MD5, lookup password based on username.
• For GSSAPI, this callback is unused.

Specified by:

lookupPassword in class AbstractSaslCallbackHandler

Parameters:

username - The username.

realm - The realm.

Returns:

The password resulting from the lookup.

authorize

protected void authorize(javax.security.sasl.AuthorizeCallback authorizeCB)

Description copied from class: AbstractSaslCallbackHandler

Final check to authorize user. Used by all SASL mechanisms. This is the only callback used by GSSAPI. Implementors use setAuthorizedID() to set the base DN after canonicalization. Implementors must setAuthorized() to true if authentication was successful.

Specified by:

authorize in class AbstractSaslCallbackHandler

Parameters:

authorizeCB - An AuthorizeCallback.