/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.apache.karaf.jaas.command;
import org.apache.felix.gogo.commands.Command;
import org.apache.felix.gogo.commands.Option;
import org.apache.karaf.jaas.boot.ProxyLoginModule;
import org.apache.karaf.jaas.config.JaasRealm;
import org.apache.karaf.jaas.modules.BackingEngine;
import javax.security.auth.login.AppConfigurationEntry;
import java.util.LinkedList;
import java.util.List;
import java.util.Queue;
@Command(scope = "jaas", name = "manage", description = "Manage users and roles of a JAAS Realm")
public class ManageRealmCommand extends JaasCommandSupport {
@Option(name = "--realm", description = "Realm Name", required = false, multiValued = false)
String realmName;
@Option(name = "--index", description = "Realm Index", required = false, multiValued = false)
int index;
@Option(name = "--module", aliases = {}, description = "Login Module Class Name", required = false, multiValued = false)
String moduleName;
@Option(name = "-f", aliases = {"--force"}, description = "Force the management of this realm, even if another one was under management", required = false, multiValued = false)
boolean force;
@Override
protected Object doExecute() throws Exception {
if (realmName == null && index <= 0) {
System.err.println("A valid realm or the realm index need to be specified");
return null;
}
JaasRealm oldRealm = (JaasRealm) this.session.get(JAAS_REALM);
AppConfigurationEntry oldEntry = (AppConfigurationEntry) this.session.get(JAAS_ENTRY);
if (oldRealm != null && !oldRealm.getName().equals(realmName) && !force) {
System.err.println("Another JAAS Realm is being edited. Cancel/update first, or use the --force option.");
} else if (oldEntry != null && !oldEntry.getLoginModuleName().equals(moduleName) && !force) {
System.err.println("Another JAAS Login Module is being edited. Cancel/update first, or use the --force option.");
} else {
JaasRealm realm = null;
AppConfigurationEntry entry = null;
if (index > 0) {
// user provided the index, get the realm AND entry from the index
List<JaasRealm> realms = getRealms();
if (realms != null && realms.size() > 0) {
int i = 1;
for (JaasRealm r : realms) {
AppConfigurationEntry[] entries = r.getEntries();
if (entries != null) {
for (int j = 0; j < entries.length; j++) {
if (i == index) {
realm = r;
entry = entries[j];
break;
}
i++;
}
}
}
}
} else {
List<JaasRealm> realms = getRealms();
if (realms != null && realms.size() > 0) {
for (JaasRealm r : realms) {
if (r.getName().equals(realmName)) {
realm = r;
break;
}
}
}
AppConfigurationEntry[] entries = realm.getEntries();
if (entries != null) {
for (AppConfigurationEntry e : entries) {
String moduleClass = (String) e.getOptions().get(ProxyLoginModule.PROPERTY_MODULE);
if (moduleName == null) {
entry = e;
break;
} else {
if (moduleName.equals(e.getLoginModuleName()) || moduleName.equals(moduleClass)) {
entry = e;
break;
}
}
}
}
}
if (realm == null) {
System.err.println("JAAS realm has not been found.");
return null;
}
if (entry == null) {
System.err.println("JAAS module has not been found.");
return null;
}
Queue<JaasCommandSupport> commands = null;
commands = (Queue<JaasCommandSupport>) this.session.get(JAAS_CMDS);
if (commands == null) {
commands = new LinkedList<JaasCommandSupport>();
}
this.session.put(JAAS_REALM, realm);
this.session.put(JAAS_ENTRY, entry);
this.session.put(JAAS_CMDS, commands);
}
return null;
}
@Override
protected Object doExecute(BackingEngine engine) throws Exception {
return null;
}
}