Class KerberosServiceAuthenticationProvider
java.lang.Object
org.springframework.security.kerberos.authentication.KerberosServiceAuthenticationProvider
- All Implemented Interfaces:
org.springframework.beans.factory.InitializingBean
,org.springframework.security.authentication.AuthenticationProvider
public class KerberosServiceAuthenticationProvider
extends Object
implements org.springframework.security.authentication.AuthenticationProvider, org.springframework.beans.factory.InitializingBean
Authentication Provider which validates Kerberos Service Tickets or SPNEGO Tokens (which includes Kerberos Service Tickets).
It needs a KerberosTicketValidator
, which contains the
code to validate the ticket, as this code is different between
SUN and IBM JRE.
It also needs an UserDetailsService
to load the user properties
and the GrantedAuthorities
, as we only get back the username
from Kerbeos
SpnegoAuthenticationProcessingFilter
.- Since:
- 1.0
- See Also:
-
KerberosTicketValidator
UserDetailsService
-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprotected void
additionalAuthenticationChecks
(org.springframework.security.core.userdetails.UserDetails userDetails, KerberosServiceRequestToken authentication) Allows subclasses to perform any additional checks of a returnedUserDetails
for a given authentication request.void
org.springframework.security.core.Authentication
authenticate
(org.springframework.security.core.Authentication authentication) void
setTicketValidator
(KerberosTicketValidator ticketValidator) TheKerberosTicketValidator
to use, for validating the Kerberos/SPNEGO tickets.void
setUserDetailsService
(org.springframework.security.core.userdetails.UserDetailsService userDetailsService) TheUserDetailsService
to use, for loading the user properties and theGrantedAuthorities
.boolean
-
Constructor Details
-
KerberosServiceAuthenticationProvider
public KerberosServiceAuthenticationProvider()
-
-
Method Details
-
authenticate
public org.springframework.security.core.Authentication authenticate(org.springframework.security.core.Authentication authentication) throws org.springframework.security.core.AuthenticationException - Specified by:
authenticate
in interfaceorg.springframework.security.authentication.AuthenticationProvider
- Throws:
org.springframework.security.core.AuthenticationException
-
supports
- Specified by:
supports
in interfaceorg.springframework.security.authentication.AuthenticationProvider
-
afterPropertiesSet
- Specified by:
afterPropertiesSet
in interfaceorg.springframework.beans.factory.InitializingBean
- Throws:
Exception
-
setUserDetailsService
public void setUserDetailsService(org.springframework.security.core.userdetails.UserDetailsService userDetailsService) TheUserDetailsService
to use, for loading the user properties and theGrantedAuthorities
.- Parameters:
userDetailsService
- the new user details service
-
setTicketValidator
TheKerberosTicketValidator
to use, for validating the Kerberos/SPNEGO tickets.- Parameters:
ticketValidator
- the new ticket validator
-
additionalAuthenticationChecks
protected void additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails userDetails, KerberosServiceRequestToken authentication) throws org.springframework.security.core.AuthenticationException Allows subclasses to perform any additional checks of a returnedUserDetails
for a given authentication request.- Parameters:
userDetails
- as retrieved from theUserDetailsService
authentication
- validatedKerberosServiceRequestToken
- Throws:
org.springframework.security.core.AuthenticationException
- AuthenticationException if the credentials could not be validated (generally aBadCredentialsException
, anAuthenticationServiceException
)
-