mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git

Matthew Swift
22.56.2013 92055d99771c629a9f148c62419143ce7c94f2b5
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License, Version 1.0 only
 * (the "License").  You may not use this file except in compliance
 * with the License.
 *
 * You can obtain a copy of the license at legal-notices/CDDLv1_0.txt
 * or http://forgerock.org/license/CDDLv1.0.html.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at legal-notices/CDDLv1_0.txt.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information:
 *      Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 *
 *
 *      Copyright 2009 Sun Microsystems, Inc.
 *      Portions copyright 2011 ForgeRock AS
 */
 
package org.forgerock.opendj.ldap.requests;
 
import static com.forgerock.opendj.ldap.CoreMessages.INFO_SASL_UNSUPPORTED_CALLBACK;
 
import java.io.IOException;
 
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.ChoiceCallback;
import javax.security.auth.callback.ConfirmationCallback;
import javax.security.auth.callback.LanguageCallback;
import javax.security.auth.callback.NameCallback;
import javax.security.auth.callback.PasswordCallback;
import javax.security.auth.callback.TextInputCallback;
import javax.security.auth.callback.TextOutputCallback;
import javax.security.auth.callback.UnsupportedCallbackException;
import javax.security.sasl.AuthorizeCallback;
import javax.security.sasl.RealmCallback;
import javax.security.sasl.RealmChoiceCallback;
 
import org.forgerock.opendj.asn1.ASN1;
import org.forgerock.opendj.asn1.ASN1Writer;
import org.forgerock.opendj.ldap.ByteString;
import org.forgerock.opendj.ldap.ByteStringBuilder;
 
/**
 * SASL bind client implementation.
 */
class SASLBindClientImpl extends BindClientImpl implements CallbackHandler {
    /**
     * The name of the default protocol used.
     */
    static final String SASL_DEFAULT_PROTOCOL = "ldap";
 
    private final String saslMechanism;
 
    /**
     * Creates a new abstract SASL bind client. The next bind request will be a
     * copy of the provided initial bind request which should be updated in
     * subsequent bind requests forming part of this authentication.
     *
     * @param initialBindRequest
     *            The initial bind request.
     */
    SASLBindClientImpl(final SASLBindRequest initialBindRequest) {
        super(initialBindRequest);
        this.saslMechanism = initialBindRequest.getSASLMechanism();
    }
 
    @Override
    public final void handle(final Callback[] callbacks) throws IOException,
            UnsupportedCallbackException {
        for (final Callback callback : callbacks) {
            if (callback instanceof NameCallback) {
                handle((NameCallback) callback);
            } else if (callback instanceof PasswordCallback) {
                handle((PasswordCallback) callback);
            } else if (callback instanceof AuthorizeCallback) {
                handle((AuthorizeCallback) callback);
            } else if (callback instanceof RealmCallback) {
                handle((RealmCallback) callback);
            } else if (callback instanceof RealmChoiceCallback) {
                handle((RealmChoiceCallback) callback);
            } else if (callback instanceof ChoiceCallback) {
                handle((ChoiceCallback) callback);
            } else if (callback instanceof ConfirmationCallback) {
                handle((ConfirmationCallback) callback);
            } else if (callback instanceof LanguageCallback) {
                handle((LanguageCallback) callback);
            } else if (callback instanceof TextInputCallback) {
                handle((TextInputCallback) callback);
            } else if (callback instanceof TextOutputCallback) {
                handle((TextOutputCallback) callback);
            } else {
                final org.forgerock.i18n.LocalizableMessage message =
                        INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
                throw new UnsupportedCallbackException(callback, message.toString());
            }
        }
    }
 
    void handle(final AuthorizeCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    void handle(final ChoiceCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    void handle(final ConfirmationCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    void handle(final LanguageCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    void handle(final NameCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    void handle(final PasswordCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    void handle(final RealmCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    void handle(final RealmChoiceCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    void handle(final TextInputCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    void handle(final TextOutputCallback callback) throws UnsupportedCallbackException {
        final org.forgerock.i18n.LocalizableMessage message =
                INFO_SASL_UNSUPPORTED_CALLBACK.get(saslMechanism, String.valueOf(callback));
        throw new UnsupportedCallbackException(callback, message.toString());
    }
 
    /**
     * Sets the SASL credentials to be used in the next bind request.
     *
     * @param saslCredentials
     *            The SASL credentials to be used in the next bind request.
     * @return A reference to this SASL bind client.
     */
    final BindClient setNextSASLCredentials(final byte[] saslCredentials) {
        final ByteString value =
                (saslCredentials != null) ? ByteString.wrap(saslCredentials) : null;
        return setNextSASLCredentials(value);
    }
 
    /**
     * Sets the SASL credentials to be used in the next bind request.
     *
     * @param saslCredentials
     *            The SASL credentials to be used in the next bind request.
     * @return A reference to this SASL bind client.
     */
    final BindClient setNextSASLCredentials(final ByteString saslCredentials) {
        final ByteStringBuilder builder = new ByteStringBuilder();
        final ASN1Writer writer = ASN1.getWriter(builder);
 
        try {
            writer.writeOctetString(saslMechanism);
            if (saslCredentials != null) {
                writer.writeOctetString(saslCredentials);
            }
        } catch (final IOException ioe) {
            throw new RuntimeException("Error encoding SaslCredentials");
        }
 
        return setNextAuthenticationValue(builder.toByteString().toByteArray());
    }
}