| | |
| | | import java.util.*; |
| | | import javax.security.auth.x500.X500Principal; |
| | | import static org.opends.messages.ExtensionMessages.*; |
| | | import org.opends.messages.Message; |
| | | import org.forgerock.i18n.LocalizableMessage; |
| | | import org.opends.server.admin.server.ConfigurationChangeListener; |
| | | import org.opends.server.admin.std.server.CertificateMapperCfg; |
| | | import org.opends.server.admin.std.server.FingerprintCertificateMapperCfg; |
| | |
| | | Backend b = DirectoryServer.getBackend(baseDN); |
| | | if ((b != null) && (! b.isIndexed(t, IndexType.EQUALITY))) |
| | | { |
| | | Message message = WARN_SATUACM_ATTR_UNINDEXED.get( |
| | | LocalizableMessage message = WARN_SATUACM_ATTR_UNINDEXED.get( |
| | | configuration.dn().toString(), |
| | | t.getNameOrOID(), b.getBackendID()); |
| | | ErrorLogger.logError(message); |
| | |
| | | // Make sure that a peer certificate was provided. |
| | | if ((certificateChain == null) || (certificateChain.length == 0)) |
| | | { |
| | | Message message = ERR_FCM_NO_PEER_CERTIFICATE.get(); |
| | | LocalizableMessage message = ERR_FCM_NO_PEER_CERTIFICATE.get(); |
| | | throw new DirectoryException(ResultCode.INVALID_CREDENTIALS, message); |
| | | } |
| | | |
| | |
| | | TRACER.debugCaught(DebugLogLevel.ERROR, e); |
| | | } |
| | | |
| | | Message message = ERR_FCM_PEER_CERT_NOT_X509.get( |
| | | LocalizableMessage message = ERR_FCM_PEER_CERT_NOT_X509.get( |
| | | String.valueOf(certificateChain[0].getType())); |
| | | throw new DirectoryException(ResultCode.INVALID_CREDENTIALS, message); |
| | | } |
| | |
| | | String peerSubject = peerCertificate.getSubjectX500Principal().getName( |
| | | X500Principal.RFC2253); |
| | | |
| | | Message message = ERR_FCM_CANNOT_CALCULATE_FINGERPRINT.get( |
| | | LocalizableMessage message = ERR_FCM_CANNOT_CALCULATE_FINGERPRINT.get( |
| | | peerSubject, getExceptionMessage(e)); |
| | | throw new DirectoryException(ResultCode.INVALID_CREDENTIALS, message); |
| | | } |
| | |
| | | |
| | | case SIZE_LIMIT_EXCEEDED: |
| | | // Multiple entries matched the filter. This is not acceptable. |
| | | Message message = ERR_FCM_MULTIPLE_SEARCH_MATCHING_ENTRIES.get( |
| | | LocalizableMessage message = ERR_FCM_MULTIPLE_SEARCH_MATCHING_ENTRIES.get( |
| | | fingerprintString); |
| | | throw new DirectoryException( |
| | | ResultCode.INVALID_CREDENTIALS, message); |
| | |
| | | } |
| | | else |
| | | { |
| | | Message message = ERR_FCM_MULTIPLE_MATCHING_ENTRIES. |
| | | LocalizableMessage message = ERR_FCM_MULTIPLE_MATCHING_ENTRIES. |
| | | get(fingerprintString, String.valueOf(userEntry.getName()), |
| | | String.valueOf(entry.getName())); |
| | | throw new DirectoryException(ResultCode.INVALID_CREDENTIALS, message); |
| | |
| | | */ |
| | | @Override() |
| | | public boolean isConfigurationAcceptable(CertificateMapperCfg configuration, |
| | | List<Message> unacceptableReasons) |
| | | List<LocalizableMessage> unacceptableReasons) |
| | | { |
| | | FingerprintCertificateMapperCfg config = |
| | | (FingerprintCertificateMapperCfg) configuration; |
| | |
| | | @Override |
| | | public boolean isConfigurationChangeAcceptable( |
| | | FingerprintCertificateMapperCfg configuration, |
| | | List<Message> unacceptableReasons) |
| | | List<LocalizableMessage> unacceptableReasons) |
| | | { |
| | | boolean configAcceptable = true; |
| | | |
| | |
| | | { |
| | | ResultCode resultCode = ResultCode.SUCCESS; |
| | | boolean adminActionRequired = false; |
| | | ArrayList<Message> messages = new ArrayList<Message>(); |
| | | ArrayList<LocalizableMessage> messages = new ArrayList<LocalizableMessage>(); |
| | | |
| | | |
| | | // Get the algorithm that will be used to generate the fingerprint. |
| | |
| | | Backend b = DirectoryServer.getBackend(baseDN); |
| | | if ((b != null) && (! b.isIndexed(t, IndexType.EQUALITY))) |
| | | { |
| | | Message message = WARN_SATUACM_ATTR_UNINDEXED.get( |
| | | LocalizableMessage message = WARN_SATUACM_ATTR_UNINDEXED.get( |
| | | configuration.dn().toString(), |
| | | t.getNameOrOID(), b.getBackendID()); |
| | | messages.add(message); |