//TODO: support for empty password should be configurable
passwordString = credential.getValue().toString();
}
else
{
throw new IdentityException("Null password value");
}
String attributeName = getTypeConfiguration(ctx, ldapIO.getIdentityType()).getPasswordAttributeName();
if (attributeName == null)
{
throw new IdentityException("IdentityType doesn't have passwordAttributeName option set: "
+ ldapIO.getIdentityType().getName());
}
LdapContext ldapContext = getLDAPContext(ctx);
try
{
//TODO: maybe perform a schema check if this attribute is allowed for such entry
Attributes attrs = new BasicAttributes(true);
Attribute attr = new BasicAttribute(attributeName);
attr.add(passwordString);
attrs.put(attr);
ldapContext.modifyAttributes(ldapIO.getDn(), DirContext.REPLACE_ATTRIBUTE,attrs);
}
catch (NamingException e)
{
throw new IdentityException("Cannot set identity password value.", e);
}
finally
{
try
{
ldapContext.close();
}
catch (NamingException e)
{
throw new IdentityException("Failed to close LDAP connection", e);
}
}
}
else
{
throw new IdentityException("CredentialType not supported for a given IdentityObjectType");
}
}