| org.apache.jetspeed.security.impl.AbstractSecurityValve
 org.apache.jetspeed.security.impl.ntlm.NtlmSecurityValve
| NtlmSecurityValve | | public class NtlmSecurityValve extends AbstractSecurityValve (Code) | | NTLMSecurityValve provides Subject creation based on the
NTLM provided request.getRemoteUser() user name. When request.getRemoteUser() holds
a valid value, then this user is authorized. Otherwise the username is retrieved
from the Principal name in the request. In this way you can use NTLM authentication, with
a fallback authentication method in case the user is not properly authenticated / authorized using
NTLM.
There are basically three authentication scenarios:
-
The user is successfully authenticated and authorized by Ntml authentication
A Subject is created, with Principal derived from the remoteUser value from Ntlm authentication
-
The user is not authenticated by Ntlm, or the authenticated (can be NTLM or any other method) user cannot be authorized by Jetspeed.
An anonymous Subject is created. The user can then be redirected to a login page for example.
-
The user is authenticated by a (non-NTLM) authentication method, e.g. container-based form authentication.
A subject is created based on the Principal name in the request.
author:
David Sean Taylor
author:
Randy Walter
author:
Scott T. Weaver
author:
Dennis Dam
version:
$Id$ |
| Constructor Summary | |
| public | NtlmSecurityValve(UserManager userMgr, String networkDomain, boolean omitDomain, boolean ntlmAuthRequired, PortalStatistics statistics, PortalAuthenticationConfiguration authenticationConfiguration)
Parameters:
userMgr - A UserManager
Parameters:
statistics - Portal Statistics
Parameters:
networkDomain - The network domain is used in combination with the omitDomain flag. | | public | NtlmSecurityValve(UserManager userMgr, String networkDomain, boolean omitDomain, boolean ntlmAuthRequired, PortalStatistics statistics)
| | public | NtlmSecurityValve(UserManager userMgr, String networkDomain, boolean omitDomain, boolean ntlmAuthRequired)
|
| NtlmSecurityValve | | public NtlmSecurityValve(UserManager userMgr, String networkDomain, boolean omitDomain, boolean ntlmAuthRequired, PortalStatistics statistics, PortalAuthenticationConfiguration authenticationConfiguration)(Code) | |
Parameters:
userMgr - A UserManager
Parameters:
statistics - Portal Statistics
Parameters:
networkDomain - The network domain is used in combination with the omitDomain flag.
Parameters:
omitDomain - If true, then the network domain is stripped from the remoteUser name.
Parameters:
ntlmAuthRequired - if true, then an exception is thrown when there is no valid remoteUser,or the remoteUser cannot be authorized. |
| NtlmSecurityValve | | public NtlmSecurityValve(UserManager userMgr, String networkDomain, boolean omitDomain, boolean ntlmAuthRequired)(Code) | | |
|
|