Package org.ldaptive.auth

Class AuthorizationIdentityEntryResolver

java.lang.Object

org.ldaptive.AbstractSearchOperationFactory

org.ldaptive.auth.AbstractSearchEntryResolver

org.ldaptive.auth.AuthorizationIdentityEntryResolver

All Implemented Interfaces:

EntryResolver, ConnectionFactoryManager

public class AuthorizationIdentityEntryResolver
extends AbstractSearchEntryResolver

Reads the authorization identity response control, then performs an object level search on the result. Useful when users authenticate with some mapped identifier, like DIGEST-MD5. This resolver must be used with an AuthenticationHandler that is configured to send the AuthorizationIdentityRequestControl.

Field Summary

Fields inherited from class org.ldaptive.AbstractSearchOperationFactory

logger

Constructor Summary

Constructors

Constructor	Description
AuthorizationIdentityEntryResolver()

Method Summary

Modifier and Type	Method	Description
protected SearchRequest	createSearchRequest(AuthenticationCriteria ac, String dn)	Returns a search request for an object level search for the supplied DN.
protected SearchResponse	performLdapSearch(AuthenticationCriteria criteria, AuthenticationHandlerResponse response)	Executes an ldap search with the supplied authentication criteria.

Methods inherited from class org.ldaptive.auth.AbstractSearchEntryResolver

createFilterTemplate, createSearchRequest, getAllowMultipleEntries, getBaseDn, getBinaryAttributes, getDerefAliases, getSubtreeSearch, getUserFilter, getUserFilterParameters, resolve, setAllowMultipleEntries, setBaseDn, setBinaryAttributes, setDerefAliases, setSubtreeSearch, setUserFilter, setUserFilterParameters

Methods inherited from class org.ldaptive.AbstractSearchOperationFactory

createSearchOperation, createSearchOperation, getConnectionFactory, getControlHandlers, getEntryHandlers, getExceptionHandler, getIntermediateResponseHandlers, getReferenceHandlers, getReferralHandlers, getRequestHandlers, getResultHandlers, getSearchResultHandlers, getThrowCondition, getUnsolicitedNotificationHandlers, setConnectionFactory, setControlHandlers, setEntryHandlers, setExceptionHandler, setIntermediateResponseHandlers, setReferenceHandlers, setReferralHandlers, setRequestHandlers, setResultHandlers, setSearchResultHandlers, setThrowCondition, setUnsolicitedNotificationHandlers

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthorizationIdentityEntryResolver

public AuthorizationIdentityEntryResolver()

Method Detail

performLdapSearch

protected SearchResponse performLdapSearch(AuthenticationCriteria criteria,
                                           AuthenticationHandlerResponse response)
                                    throws LdapException

Description copied from class: AbstractSearchEntryResolver

Executes an ldap search with the supplied authentication criteria.

Specified by:

performLdapSearch in class AbstractSearchEntryResolver

Parameters:

criteria - authentication criteria associated with the user

response - response from the authentication event

Returns:

search result

Throws:

LdapException - if an error occurs attempting the search

createSearchRequest

protected SearchRequest createSearchRequest(AuthenticationCriteria ac,
                                            String dn)

Returns a search request for an object level search for the supplied DN.

Parameters:

ac - authentication criteria containing return attributes

dn - from the who am i operation

Returns:

search request