Package hudson.plugins.active_directory

Class ActiveDirectoryUnixAuthenticationProvider

java.lang.Object

hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider

All Implemented Interfaces:

GroupDetailsService, org.springframework.security.core.userdetails.UserDetailsService

public class ActiveDirectoryUnixAuthenticationProvider
extends AbstractActiveDirectoryAuthenticationProvider

AuthenticationProvider with Active Directory, through LDAP.

Author:

Kohsuke Kawaguchi, James Nord

Nested Class Summary

Nested classes/interfaces inherited from class hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

AbstractActiveDirectoryAuthenticationProvider.NoAuthentication

Field Summary

Fields

Modifier and Type	Field	Description
protected static final String	DN_FORMATTED
protected TlsConfiguration	tlsConfiguration	Deprecated.

Constructor Summary

Constructors

Constructor	Description
ActiveDirectoryUnixAuthenticationProvider(ActiveDirectorySecurityRealm realm)

Method Summary

Modifier and Type	Method	Description
GroupDetails	loadGroupByGroupname(String groupname)
org.springframework.security.core.userdetails.UserDetails	retrieveUser(String username, hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.Password password, ActiveDirectoryDomain domain, List<SocketInfo> ldapServers)	Authenticates and retrieves the user by using the given list of available AD LDAP servers.
protected org.springframework.security.core.userdetails.UserDetails	retrieveUser(String username, org.springframework.security.authentication.UsernamePasswordAuthenticationToken authentication)	Authenticates the user (if authentication!=null), or retrieve the user name information (otherwise.)

Methods inherited from class hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

additionalAuthenticationChecks, loadUserByUsername

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DN_FORMATTED

protected static final String DN_FORMATTED

See Also:

• Constant Field Values

tlsConfiguration

@Deprecated
protected TlsConfiguration tlsConfiguration

Deprecated.

Selects the SSL strategy to follow on the TLS connections

Even if we are not using any of the TLS ports (3269/636) the plugin will try to establish a TLS channel using startTLS. Because of this, we need to be able to specify the SSL strategy on the plugin

For the moment there are two possible values: trustAllCertificates and trustStore.

Constructor Details

ActiveDirectoryUnixAuthenticationProvider

public ActiveDirectoryUnixAuthenticationProvider(ActiveDirectorySecurityRealm realm)

Method Details

retrieveUser

protected org.springframework.security.core.userdetails.UserDetails retrieveUser(String username,
 org.springframework.security.authentication.UsernamePasswordAuthenticationToken authentication)
                                                                          throws org.springframework.security.core.AuthenticationException

Description copied from class: AbstractActiveDirectoryAuthenticationProvider

Authenticates the user (if authentication!=null), or retrieve the user name information (otherwise.)

Specified by:

retrieveUser in class AbstractActiveDirectoryAuthenticationProvider

Throws:

org.springframework.security.core.AuthenticationException

retrieveUser

public org.springframework.security.core.userdetails.UserDetails retrieveUser(String username,
 hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.Password password,
 ActiveDirectoryDomain domain,
 List<SocketInfo> ldapServers)
                                                                       throws NamingException

Authenticates and retrieves the user by using the given list of available AD LDAP servers.

Parameters:

password - If this is AbstractActiveDirectoryAuthenticationProvider.NoAuthentication, the authentication is not performed, and just the retrieval would happen.

Returns:

never null

Throws:

org.springframework.security.core.userdetails.UsernameNotFoundException - The user didn't exist.

NamingException

loadGroupByGroupname

public GroupDetails loadGroupByGroupname(String groupname)