org.globus.gsi.gssapi.auth

Class IdentityAuthorization

java.lang.Object

org.globus.gsi.gssapi.auth.Authorization

org.globus.gsi.gssapi.auth.GSSAuthorization

org.globus.gsi.gssapi.auth.IdentityAuthorization

public class IdentityAuthorization
extends GSSAuthorization

Implements a simple identity authorization mechanism. The given identify is compared with the peer's identity.

Field Summary

Fields

Modifier and Type	Field and Description
protected java.lang.String	_identity

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	IdentityAuthorization() Constructor used by superclasses.
	IdentityAuthorization(java.lang.String identity) Creates a new instance of this class with given expected identity.

Method Summary

Methods

Modifier and Type	Method and Description
void	authorize(org.ietf.jgss.GSSContext context, java.lang.String host) Performs identity authorization.
boolean	equals(java.lang.Object o)
org.ietf.jgss.GSSName	getExpectedName(org.ietf.jgss.GSSCredential cred, java.lang.String host) Returns expected GSSName used for authorization purposes.
java.lang.String	getIdentity() Returns the expected identity.
int	hashCode()
void	setIdentity(java.lang.String identity) Sets the expected identity for the authorization check.

Methods inherited from class org.globus.gsi.gssapi.auth.Authorization

generateAuthorizationException

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Field Detail

_identity

protected java.lang.String _identity

Constructor Detail

IdentityAuthorization

protected IdentityAuthorization()

Constructor used by superclasses.

IdentityAuthorization

public IdentityAuthorization(java.lang.String identity)

Creates a new instance of this class with given expected identity.

Parameters:

identity - the expected identity. Must not be null.

Method Detail

setIdentity

public void setIdentity(java.lang.String identity)

Sets the expected identity for the authorization check.

Parameters:

identity - the expected identity. Must not be null.

getIdentity

public java.lang.String getIdentity()

Returns the expected identity.

Returns:

the expected identity.

getExpectedName

public org.ietf.jgss.GSSName getExpectedName(org.ietf.jgss.GSSCredential cred,
                                    java.lang.String host)
                                      throws org.ietf.jgss.GSSException

Description copied from class: GSSAuthorization

Returns expected GSSName used for authorization purposes. Can returns null for self authorization.

Specified by:

getExpectedName in class GSSAuthorization

Parameters:

cred - credentials used

host - host address of the peer.

Throws:

org.ietf.jgss.GSSException - if unable to create the name.

authorize

public void authorize(org.ietf.jgss.GSSContext context,
             java.lang.String host)
               throws AuthorizationException

Performs identity authorization. The given identity is compared with the peer's identity.

Specified by:

authorize in class Authorization

Parameters:

context - the security context

host - host address of the peer.

Throws:

AuthorizationException - if the peer's identity does not match the expected identity.

equals

public boolean equals(java.lang.Object o)

Overrides:

equals in class java.lang.Object

hashCode

public int hashCode()

Overrides:

hashCode in class java.lang.Object