final FtpServerContext context,
final FtpRequest request) throws IOException, FtpException {
boolean success = false;
ServerFtpStatistics stat = (ServerFtpStatistics)context.getFtpStatistics();
try {
// reset state variables
session.resetState();
// argument check
String password = request.getArgument();
if(password == null) {
session.write(FtpReplyUtil.translate(session, request, context, FtpReply.REPLY_501_SYNTAX_ERROR_IN_PARAMETERS_OR_ARGUMENTS, "PASS", null));
return;
}
// check user name
String userName = session.getUserArgument();
if(userName == null && session.getUser() == null) {
session.write(FtpReplyUtil.translate(session, request, context, FtpReply.REPLY_503_BAD_SEQUENCE_OF_COMMANDS, "PASS", null));
return;
}
// already logged-in
if(session.isLoggedIn()) {
session.write(FtpReplyUtil.translate(session, request, context, FtpReply.REPLY_202_COMMAND_NOT_IMPLEMENTED, "PASS", null));
return;
}
// anonymous login limit check
boolean anonymous = userName != null && userName.equals("anonymous");
if(anonymous) {
int currAnonLogin = stat.getCurrentAnonymousLoginNumber();
int maxAnonLogin = context.getConnectionConfig().getMaxAnonymousLogins();
if( currAnonLogin >= maxAnonLogin ) {
session.write(FtpReplyUtil.translate(session, request, context, FtpReply.REPLY_421_SERVICE_NOT_AVAILABLE_CLOSING_CONTROL_CONNECTION, "PASS.anonymous", null));
return;
}
}
// login limit check
int currLogin = stat.getCurrentLoginNumber();
int maxLogin = context.getConnectionConfig().getMaxLogins();
if(maxLogin != 0 && currLogin >= maxLogin) {
session.write(FtpReplyUtil.translate(session, request, context, FtpReply.REPLY_421_SERVICE_NOT_AVAILABLE_CLOSING_CONTROL_CONNECTION, "PASS.login", null));
return;
}
// authenticate user
UserManager userManager = context.getUserManager();
User authenticatedUser = null;
try {
UserMetadata userMetadata = new UserMetadata();
if(session.getRemoteAddress() instanceof InetSocketAddress) {
userMetadata.setInetAddress(((InetSocketAddress)session.getRemoteAddress()).getAddress());
}
userMetadata.setCertificateChain(session.getClientCertificates());
Authentication auth;
if(anonymous) {
auth = new AnonymousAuthentication(userMetadata);
}
else {
auth = new UsernamePasswordAuthentication(userName, password, userMetadata);
}
authenticatedUser = userManager.authenticate(auth);
} catch(AuthenticationFailedException e) {
authenticatedUser = null;
LOG.warn("User failed to log in");
}
catch(Exception e) {
authenticatedUser = null;
LOG.warn("PASS.execute()", e);
}
// set the user so that the Ftplets will be able to verify it
// first save old values so that we can reset them if Ftplets
// tell us to fail
User oldUser = session.getUser();
String oldUserArgument = session.getUserArgument();
int oldMaxIdleTime = session.getMaxIdleTime();
if(authenticatedUser != null) {
session.setUser(authenticatedUser);
session.setUserArgument(null);
session.setMaxIdleTime(authenticatedUser.getMaxIdleTime());
success = true;
} else {
session.setUser(null);
}
// call Ftplet.onLogin() method
Ftplet ftpletContainer = context.getFtpletContainer();
if(ftpletContainer != null) {
FtpletEnum ftpletRet;
try{
ftpletRet = ftpletContainer.onLogin(session.getFtpletSession(), request);
} catch(Exception e) {
LOG.debug("Ftplet container threw exception", e);
ftpletRet = FtpletEnum.RET_DISCONNECT;
}
if(ftpletRet == FtpletEnum.RET_DISCONNECT) {
session.closeOnFlush().awaitUninterruptibly(10000);
return;
} else if(ftpletRet == FtpletEnum.RET_SKIP) {
success = false;
}
}
if(!success) {
// reset due to failure
session.setUser(oldUser);
session.setUserArgument(oldUserArgument);
session.setMaxIdleTime(oldMaxIdleTime);
delayAfterLoginFailure(context.getConnectionConfig().getLoginFailureDelay());
LOG.warn("Login failure - " + userName);
session.write(FtpReplyUtil.translate(session, request, context, FtpReply.REPLY_530_NOT_LOGGED_IN, "PASS", userName));
stat.setLoginFail(session);
session.increaseFailedLogins();
// kick the user if the max number of failed logins is reached
int maxAllowedLoginFailues = context.getConnectionConfig().getMaxLoginFailures();
if(maxAllowedLoginFailues != 0 &&
session.getFailedLogins() >= maxAllowedLoginFailues) {
session.closeOnFlush().awaitUninterruptibly(10000);
}
return;
}
// update different objects
FileSystemManager fmanager = context.getFileSystemManager();
FileSystemView fsview = fmanager.createFileSystemView(authenticatedUser);
session.setLogin(fsview);
stat.setLogin(session);
// everything is fine - send login ok message
session.write(FtpReplyUtil.translate(session, request, context, FtpReply.REPLY_230_USER_LOGGED_IN, "PASS", userName));
if(anonymous) {
LOG.info("Anonymous login success - " + password);