public class JAASAuthenticationComponent extends AbstractAuthenticationComponent
login.config.url.1=file:${java.home}/lib/security/java.login.config
Example configuration entries for Kerberos would be:
Alfresco {
com.sun.security.auth.module.Krb5LoginModule sufficient;
};
com.sun.net.ssl.client {
com.sun.security.auth.module.Krb5LoginModule sufficient;
};
other {
com.sun.security.auth.module.Krb5LoginModule sufficient;
};
This sets up authentication using Kerberos for Alfresco and some defaults that would use the same mechanism if sasl failed for example.
You could use kerberos and LDAP combined against an Active Directory server.AuthenticationComponent.UserNameValidationMode| Constructor and Description |
|---|
JAASAuthenticationComponent() |
| Modifier and Type | Method and Description |
|---|---|
protected void |
authenticateImpl(java.lang.String userName,
char[] password)
Implement Authentication
|
protected boolean |
implementationAllowsGuestLogin()
Jaas does not support guest login
|
void |
setJaasConfigEntryName(java.lang.String jaasConfigEntryName) |
void |
setRealm(java.lang.String realm) |
authenticate, clearCurrentSecurityContext, getAllowGuestLogin, getCurrentAuthentication, getCurrentUserName, getDefaultAdministratorUserNames, getDefaultGuestUserNames, getGuestUserName, getGuestUserName, getNodeService, getPersonService, getSystemUserName, getSystemUserName, getTransactionService, getUserDetails, getUserDomain, guestUserAuthenticationAllowed, isCurrentUserTheSystemUser, isGuestUserName, isSystemUserName, setAllowGuestLogin, setAuthenticationContext, setCurrentAuthentication, setCurrentUser, setCurrentUser, setDefaultAdministratorUserNameList, setDefaultAdministratorUserNames, setDefaultGuestUserNameList, setDefaultGuestUserNames, setGuestUserAsCurrentUser, setNodeService, setPersonService, setSystemUserAsCurrentUser, setSystemUserAsCurrentUser, setTransactionService, setUserDetails, setUserRegistrySynchronizerpublic void setJaasConfigEntryName(java.lang.String jaasConfigEntryName)
public void setRealm(java.lang.String realm)
protected boolean implementationAllowsGuestLogin()
implementationAllowsGuestLogin in class AbstractAuthenticationComponentprotected void authenticateImpl(java.lang.String userName,
char[] password)
throws org.alfresco.repo.security.authentication.AuthenticationException
authenticateImpl in class AbstractAuthenticationComponentorg.alfresco.repo.security.authentication.AuthenticationExceptionCopyright © 2005 - 2010 Alfresco Software, Inc. All Rights Reserved.