co.codewizards.cloudstore.rest.server.ldap

Class QueryLdapClient

java.lang.Object

co.codewizards.cloudstore.rest.server.ldap.QueryLdapClient

All Implemented Interfaces:

LdapClient

public class QueryLdapClient
extends Object
implements LdapClient

Authentication flow used by this client: At first DirContext is created, based on provided url, adminDn and adminPassword. Then on this DirContext instance search is executed for given LDAP query and queryDN. Search has SUBTREE_SCOPE.

Author:

Wojtek Wilk - wilk.wojtek at gmail.com

See Also:

SUBTREE_SCOPE Query should contain template variable ${login}(one or more) which is replaced with userName from provided Auth object If search returns any results then credentials of DirContext are replaced with result's DN (as PRINCIPAL) and password from provided Auth (as CREDENTIALS), and lookup() is called. If lookup() doesn't throw AuthenticationException then authentication succeeded.

Constructor Summary

Constructors

Constructor and Description
QueryLdapClient(String query, String queryDn, String url, String bindDn, char[] password)

Method Summary

Modifier and Type	Method and Description
String	authenticate(Auth auth)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

QueryLdapClient

public QueryLdapClient(String query,
                       String queryDn,
                       String url,
                       String bindDn,
                       char[] password)

Method Detail

authenticate

public String authenticate(Auth auth)

Specified by:

authenticate in interface LdapClient