org.keycloak.storage.ldap.mappers.msad

Class MSADUserAccountControlStorageMapper

java.lang.Object

org.keycloak.storage.ldap.mappers.AbstractLDAPStorageMapper

org.keycloak.storage.ldap.mappers.msad.MSADUserAccountControlStorageMapper

All Implemented Interfaces:

PasswordUpdated

public class MSADUserAccountControlStorageMapper
extends AbstractLDAPStorageMapper
implements PasswordUpdated

Mapper specific to MSAD. It's able to read the userAccountControl and pwdLastSet attributes and set actions in Keycloak based on that. It's also able to handle exception code from LDAP user authentication (See http://www-01.ibm.com/support/docview.wss?uid=swg21290631 )

Author:

Marek Posolda

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
class	MSADUserAccountControlStorageMapper.MSADUserModelDelegate

Field Summary

Fields inherited from class org.keycloak.storage.ldap.mappers.AbstractLDAPStorageMapper

ldapProvider, mapperModel, realm

Constructor Summary

Constructors

Constructor and Description
MSADUserAccountControlStorageMapper(ComponentModel mapperModel, LDAPStorageProvider ldapProvider, RealmModel realm)

Method Summary

Modifier and Type	Method and Description
void	beforeLDAPQuery(LDAPQuery query)
protected UserAccountControl	getUserAccountControl(LDAPObject ldapUser)
boolean	onAuthenticationFailure(LDAPObject ldapUser, UserModel user, AuthenticationException ldapException)
void	onImportUserFromLDAP(LDAPObject ldapUser, UserModel user, boolean isCreate)
void	onRegisterUserToLDAP(LDAPObject ldapUser, UserModel localUser)
void	passwordUpdated(UserModel user, LDAPObject ldapUser, CredentialInput input)
protected boolean	processAuthErrorCode(String errorCode, UserModel user)
protected ModelException	processFailedPasswordUpdateException(ModelException e)
UserModel	proxy(LDAPObject ldapUser, UserModel delegate)
protected void	updateUserAccountControl(LDAPObject ldapUser, UserAccountControl accountControl)

Methods inherited from class org.keycloak.storage.ldap.mappers.AbstractLDAPStorageMapper

getGroupMembers, getLdapProvider, getRealm, parseBooleanParameter, syncDataFromFederationProviderToKeycloak, syncDataFromKeycloakToFederationProvider

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MSADUserAccountControlStorageMapper

public MSADUserAccountControlStorageMapper(ComponentModel mapperModel,
                                           LDAPStorageProvider ldapProvider,
                                           RealmModel realm)

Method Detail

beforeLDAPQuery

public void beforeLDAPQuery(LDAPQuery query)

Specified by:

beforeLDAPQuery in class AbstractLDAPStorageMapper

See Also:

LDAPStorageMapper.beforeLDAPQuery(ComponentModel, LDAPQuery)

passwordUpdated

public void passwordUpdated(UserModel user,
                            LDAPObject ldapUser,
                            CredentialInput input)

Specified by:

passwordUpdated in interface PasswordUpdated

proxy

public UserModel proxy(LDAPObject ldapUser,
                       UserModel delegate)

Specified by:

proxy in class AbstractLDAPStorageMapper

See Also:

LDAPStorageMapper.proxy(ComponentModel, LDAPStorageProvider, LDAPObject, UserModel, RealmModel)

onRegisterUserToLDAP

public void onRegisterUserToLDAP(LDAPObject ldapUser,
                                 UserModel localUser)

Specified by:

onRegisterUserToLDAP in class AbstractLDAPStorageMapper

See Also:

LDAPStorageMapper.onRegisterUserToLDAP(ComponentModel, LDAPStorageProvider, LDAPObject, UserModel, RealmModel)

onImportUserFromLDAP

public void onImportUserFromLDAP(LDAPObject ldapUser,
                                 UserModel user,
                                 boolean isCreate)

Specified by:

onImportUserFromLDAP in class AbstractLDAPStorageMapper

See Also:

LDAPStorageMapper.onImportUserFromLDAP(ComponentModel, LDAPStorageProvider, LDAPObject, UserModel, RealmModel, boolean)

onAuthenticationFailure

public boolean onAuthenticationFailure(LDAPObject ldapUser,
                                       UserModel user,
                                       AuthenticationException ldapException)

Overrides:

onAuthenticationFailure in class AbstractLDAPStorageMapper

processAuthErrorCode

protected boolean processAuthErrorCode(String errorCode,
                                       UserModel user)

processFailedPasswordUpdateException

protected ModelException processFailedPasswordUpdateException(ModelException e)

getUserAccountControl

protected UserAccountControl getUserAccountControl(LDAPObject ldapUser)

updateUserAccountControl

protected void updateUserAccountControl(LDAPObject ldapUser,
                                        UserAccountControl accountControl)