Package hudson.plugins.active_directory

Class ActiveDirectoryUnixAuthenticationProvider

java.lang.Object

hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

hudson.plugins.active_directory.ActiveDirectoryUnixAuthenticationProvider

All Implemented Interfaces:

GroupDetailsService, UserDetailsService

public class ActiveDirectoryUnixAuthenticationProvider
extends AbstractActiveDirectoryAuthenticationProvider

AuthenticationProvider with Active Directory, through LDAP.

Author:

Kohsuke Kawaguchi, James Nord

Nested Class Summary

Nested classes/interfaces inherited from class hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

AbstractActiveDirectoryAuthenticationProvider.NoAuthentication

Field Summary

Fields

Modifier and Type	Field	Description
protected static String	DN_FORMATTED
protected TlsConfiguration	tlsConfiguration	Deprecated.

Constructor Summary

Constructors

Constructor	Description
ActiveDirectoryUnixAuthenticationProvider(ActiveDirectorySecurityRealm realm)

Method Summary

Modifier and Type	Method	Description
GroupDetails	loadGroupByGroupname(String groupname)
UserDetails	retrieveUser(String username, hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.Password password, ActiveDirectoryDomain domain, List<SocketInfo> ldapServers)	Authenticates and retrieves the user by using the given list of available AD LDAP servers.
protected UserDetails	retrieveUser(String username, UsernamePasswordAuthenticationToken authentication)	Authenticates the user (if authentication!=null), or retrieve the user name information (otherwise.)

Methods inherited from class hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider

additionalAuthenticationChecks, loadUserByUsername

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.acegisecurity.userdetails.UserDetailsService

toSpring

Field Detail

DN_FORMATTED

protected static final String DN_FORMATTED

See Also:

Constant Field Values

tlsConfiguration

@Deprecated
protected TlsConfiguration tlsConfiguration

Deprecated.

Selects the SSL strategy to follow on the TLS connections

Even if we are not using any of the TLS ports (3269/636) the plugin will try to establish a TLS channel using startTLS. Because of this, we need to be able to specify the SSL strategy on the plugin

For the moment there are two possible values: trustAllCertificates and trustStore.

Constructor Detail

ActiveDirectoryUnixAuthenticationProvider

public ActiveDirectoryUnixAuthenticationProvider(ActiveDirectorySecurityRealm realm)

Method Detail

retrieveUser

protected UserDetails retrieveUser(String username,
                                   UsernamePasswordAuthenticationToken authentication)
                            throws AuthenticationException

Description copied from class: AbstractActiveDirectoryAuthenticationProvider

Authenticates the user (if authentication!=null), or retrieve the user name information (otherwise.)

Specified by:

retrieveUser in class AbstractActiveDirectoryAuthenticationProvider

Throws:

AuthenticationException

retrieveUser

public UserDetails retrieveUser(String username,
                                hudson.plugins.active_directory.AbstractActiveDirectoryAuthenticationProvider.Password password,
                                ActiveDirectoryDomain domain,
                                List<SocketInfo> ldapServers)
                         throws NamingException

Authenticates and retrieves the user by using the given list of available AD LDAP servers.

Parameters:

password - If this is AbstractActiveDirectoryAuthenticationProvider.NoAuthentication, the authentication is not performed, and just the retrieval would happen.

Returns:

never null

Throws:

UsernameNotFoundException - The user didn't exist.

NamingException

loadGroupByGroupname

public GroupDetails loadGroupByGroupname(String groupname)