Examples of org.jboss.security.plugins.JaasSecurityDomain

org.jboss.security.plugins.JaasSecurityDomain
The JaasSecurityDomain is an extension of JaasSecurityManager that addes the notion of a KeyStore, and JSSE KeyManagerFactory and TrustManagerFactory for supporting SSL and other cryptographic use cases. Attributes:
- KeyStoreType: The implementation type name being used, defaults to 'JKS'.
- KeyStoreURL: Set the KeyStore database URL string. This is used to obtain an InputStream to initialize the KeyStore. If the string is not a value URL, its treated as a file.
- KeyStorePass: the password used to load the KeyStore. Its format is one of:
  - The plaintext password for the KeyStore(or whatever format is used by the KeyStore). The toCharArray() value of the string is used without any manipulation.
  - A command to execute to obtain the plaintext password. The format is '{EXT}...' where the '...' is the exact command line that will be passed to the Runtime.exec(String) method to execute a platform command. The first line of the command output is used as the password.
  - A class to create to obtain the plaintext password. The format is '{CLASS}classname[:ctorarg]' where the '[:ctorarg]' is an optional string delimited by the ':' from the classname that will be passed to the classname ctor. The password is obtained from classname by invoking a 'char[] toCharArray()' method if found, otherwise, the 'String toString()' method is used.
  The KeyStorePass is also used in combination with the Salt and IterationCount attributes to create a PBE secret key used with the encode/decode operations.
- ManagerServiceName: The JMX object name string of the security manager service that the domain registers with to function as a security manager for the security domain name passed to the ctor. The makes the JaasSecurityDomain available under the standard JNDI java:/jaas/(domain) binding.
- LoadSunJSSEProvider: A flag indicating if the Sun com.sun.net.ssl.internal.ssl.Provider security provider should be loaded on startup. This is needed when using the Sun JSSE jars without them installed as an extension with JDK 1.3. This should be set to false with JDK 1.4 or when using an alternate JSSE provider
- Salt:
- IterationCount:
@todo add support for encode/decode based on a SecretKey in the keystore. @author Scott.Stark@jboss.org @author Jason Essington @author Ovidiu Feodorov @author Marcus Moyses @version $Revision: 109874 $

   }
   public void testLdapExample11Encrypt() throws Exception
   {
      System.out.println("testLdapExample11Encrypt");
      MBeanServer server = MBeanServerFactory.createMBeanServer("jboss");
      JaasSecurityDomain secDomain = new JaasSecurityDomain("testLdapExample11Encrypt");
      secDomain.setSalt("abcdefgh");
      secDomain.setIterationCount(13);
      secDomain.setKeyStorePass("master");
      secDomain.setManagerServiceName(null);
      secDomain.start();
      ObjectName name = new ObjectName("jboss.test:service=JaasSecurityDomain,domain=testLdapExample11Encrypt");
      server.registerMBean(secDomain, name);


      // secret1 encrypts to 7hInTB4HCBL
      UsernamePasswordHandler handler = new UsernamePasswordHandler("jduke", "theduke".toCharArray());

View Full Code Here

   }
   public void testLdapExample21Encrypt() throws Exception
   {
      System.out.println("testLdapExample21Encrypt");
      MBeanServer server = MBeanServerFactory.createMBeanServer("jboss");
      JaasSecurityDomain secDomain = new JaasSecurityDomain("testLdapExample21Encrypt");
      secDomain.setSalt("abcdefgh");
      secDomain.setIterationCount(13);
      secDomain.setKeyStorePass("master");
      secDomain.setManagerServiceName(null);
      secDomain.start();
      ObjectName name = new ObjectName("jboss.test:service=JaasSecurityDomain,domain=testLdapExample21Encrypt");
      server.registerMBean(secDomain, name);


      UsernamePasswordHandler handler = new UsernamePasswordHandler("jduke",
         "theduke".toCharArray());

View Full Code Here


      public Object run() throws Exception
      {
         // Invoke the JaasSecurityDomain.decodeb64 operation
         InitialContext ctx = new InitialContext();
         JaasSecurityDomain securityDomain = (JaasSecurityDomain) ctx.lookup(jaasSecurityDomain);
         byte[] secret = securityDomain.decode64(password);
         // Convert to UTF-8 base char array
         String secretPassword = new String(secret, "UTF-8");
         return secretPassword.toCharArray();
      }

View Full Code Here

   }
   public void testLdapExample11Encrypt() throws Exception
   {
      System.out.println("testLdapExample11Encrypt");
      MBeanServer server = MBeanServerFactory.createMBeanServer("jboss");
      JaasSecurityDomain secDomain = new JaasSecurityDomain("testLdapExample11Encrypt");
      secDomain.setSalt("abcdefgh");
      secDomain.setIterationCount(13);
      secDomain.setKeyStorePass("master");
      secDomain.setManagerServiceName(null);
      secDomain.start();
      ObjectName name = new ObjectName("jboss.test:service=JaasSecurityDomain,domain=testLdapExample11Encrypt");
      server.registerMBean(secDomain, name);


      // secret1 encrypts to 7hInTB4HCBL
      UsernamePasswordHandler handler = new UsernamePasswordHandler("jduke", "theduke".toCharArray());

View Full Code Here

   }
   public void testLdapExample21Encrypt() throws Exception
   {
      System.out.println("testLdapExample21Encrypt");
      MBeanServer server = MBeanServerFactory.createMBeanServer("jboss");
      JaasSecurityDomain secDomain = new JaasSecurityDomain("testLdapExample21Encrypt");
      secDomain.setSalt("abcdefgh");
      secDomain.setIterationCount(13);
      secDomain.setKeyStorePass("master");
      secDomain.setManagerServiceName(null);
      secDomain.start();
      ObjectName name = new ObjectName("jboss.test:service=JaasSecurityDomain,domain=testLdapExample21Encrypt");
      server.registerMBean(secDomain, name);


      UsernamePasswordHandler handler = new UsernamePasswordHandler("jduke",
         "theduke".toCharArray());

View Full Code Here

   }
   public void testJaasSecurityDomainIdentityLoginModule() throws Exception
   {
      log.info("testJaasSecurityDomainIdentityLoginModule");
      MBeanServer server = MBeanServerFactory.createMBeanServer("jboss");
      JaasSecurityDomain secDomain = new JaasSecurityDomain("testEncodeDecode");
      secDomain.setSalt("abcdefgh");
      secDomain.setIterationCount(13);
      secDomain.setKeyStorePass("master");
      secDomain.setManagerServiceName(null);
      secDomain.start();
      ObjectName name = new ObjectName("jboss.test:service=JaasSecurityDomain,domain=testJaasSecurityDomainIdentityLoginModule");
      server.registerMBean(secDomain, name);


      LoginContext lc = new LoginContext("testJaasSecurityDomainIdentityLoginModule");
      lc.login();

View Full Code Here

            return true;


        try {
            Context ctx = new InitialContext();


            JaasSecurityDomain sd = (JaasSecurityDomain) ctx.lookup(localValidationSecurityDomain);
            KeyStore ts = sd.getTrustStore();


            if (ts == null) {
                throw logger.authNullKeyStoreFromSecurityDomainError(sd.getName());
            }


            String alias = sd.getKeyStoreAlias();


            if (alias == null) {
                throw logger.authNullKeyStoreAliasFromSecurityDomainError(sd.getName());
            }


            Certificate cert = ts.getCertificate(alias);


            if (cert == null) {
                throw logger.authNoCertificateFoundForAliasError(alias, sd.getName());
            }


            PublicKey publicKey = cert.getPublicKey();


            boolean sigValid = AssertionUtil.isSignatureValid(assertionElement, publicKey);

View Full Code Here

     * @throws Exception
     */
    protected KeyStore getKeyStore() throws Exception {
        // get keystore
        Context ctx = new InitialContext();
        JaasSecurityDomain sd = (JaasSecurityDomain) ctx
                .lookup(localValidationSecurityDomain);
        return sd.getTrustStore();
    }

View Full Code Here

TOP

Related Classes of org.jboss.security.plugins.JaasSecurityDomain

org.jboss.net.ssl.JBossHttp11AprProtocol$DecodeAction

org.jboss.security.auth.callback.JBossCallbackHandler

org.jboss.security.auth.callback.SecurityAssociationHandler

org.jboss.security.integration.JNDIBasedSecurityManagement

org.jboss.test.ldap.LoginModulesTestCase

org.jboss.test.security.test.LoginModulesUnitTestCase

org.picketlink.identity.federation.bindings.jboss.auth.SAML2STSLoginModule

org.picketlink.identity.federation.bindings.jboss.auth.SAMLTokenCertValidatingLoginModule

java.security.Key

java.security.Provider

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.