Initial check-in of native (PAM/Win32) auth support (JM-201).

git-svn-id: http://svn.igniterealtime.org/svn/repos/messenger/trunk@2673 b35dd754-fafc-0310-a699-88a17e54d16e

src/java/org/jivesoftware/messenger/auth/NativeAuthProvider.java

+/**
+ * $RCSfile$
+ * $Revision: 1765 $
+ * $Date: 2005-08-10 22:37:59 -0700 (Wed, 10 Aug 2005) $
+ *
+ * Copyright (C) 2005 Jive Software. All rights reserved.
+ *
+ * This software is published under the terms of the GNU Public License (GPL),
+ * a copy of which is included in this distribution.
+ */
+
+package org.jivesoftware.messenger.auth;
+
+import org.jivesoftware.util.Log;
+import org.jivesoftware.util.JiveGlobals;
+import org.jivesoftware.util.StringUtils;
+import org.jivesoftware.messenger.user.UserManager;
+import org.jivesoftware.messenger.user.UserNotFoundException;
+import org.jivesoftware.messenger.user.UserAlreadyExistsException;
+import org.jivesoftware.messenger.user.NativeUserProvider;
+import com.cenqua.shaj.Shaj;
+
+import java.net.URL;
+import java.io.File;
+import java.lang.reflect.Field;
+
+/**
+ * Authenticates using the native operating system authentication method. On Windows,
+ * this means Win32 authentication; on Unix/Linux, PAM authentication. New user accounts
+ * will be created automatically as needed.<p>
+ *
+ * Authentication is handled using the <a href="http://opensource.cenqua.com/shaj">Shaj</a>
+ * library. In order for this provider to work, the appropriate native library must be loaded.
+ * The appropriate native library must be manually moved from the resources/nativeAuth
+ * directory to the lib directory.<p>
+ *
+ * To enable this provider, set the following in the XML configuration file:
+ *
+ * <pre>
+ * &lt;provider&gt;
+ *     &lt;auth&gt;
+ *         &lt;className&gt;org.jivesoftware.messenger.auth.NativeAuthProvider&lt;/className&gt;
+ *     &lt;/auth&gt;
+ *     &lt;user&gt;
+ *         &lt;className&gt;org.jivesoftware.messenger.user.NativeUserProvider&lt;/className&gt;
+ *     &lt;/user&gt;
+ * &lt;/provider&gt;
+ * </pre>
+ *
+ * The properties to configure the provider are as follows:
+ *
+ * <ul>
+ *      <li>nativeAuth.domain -- <i> on Windows, the domain to use for authentication.
+ *      If the value is not set, the machine's default domain will be used or standard OS
+ *      auth will be used if the machine is not part of a domain. On Unix/Linux, this
+ *      value specifies the PAM module to use for authentication. If the value is not set,
+ *      the PAM module "other" will be used.
+ * </ul>
+ *
+ * @author Matt Tucker
+ */
+public class NativeAuthProvider implements AuthProvider {
+
+    private String domain;
+
+    public NativeAuthProvider() {
+        this.domain = JiveGlobals.getXMLProperty("nativeAuth.domain");
+
+        // Configure the library path so that we can load the shaj native library
+        // from the Jive Messenger lib directory.
+        // Find the root path of this class.
+        try {
+            String binaryPath = (new URL(Shaj.class.getProtectionDomain()
+                    .getCodeSource().getLocation(), ".")).openConnection()
+                    .getPermission().getName();
+            binaryPath = (new File(binaryPath)).getCanonicalPath();
+
+            // Add the binary path to "java.library.path".
+            String newLibPath = binaryPath + File.pathSeparator +
+                    System.getProperty("java.library.path");
+            System.setProperty("java.library.path", newLibPath);
+            Field fieldSysPath = ClassLoader.class.getDeclaredField("sys_paths");
+            fieldSysPath.setAccessible(true);
+            fieldSysPath.set(System.class.getClassLoader(), null);
+        }
+        catch (Exception e) {
+            Log.error(e);
+        }
+
+        // Configure Shaj to log output to the Jive Messenger logger.
+        com.cenqua.shaj.log.Log.Factory.setInstance(new com.cenqua.shaj.log.Log() {
+            public boolean isDebug() {
+                return Log.isDebugEnabled();
+            }
+
+            public void error(String string) {
+                Log.error(string);
+            }
+
+            public void error(String string, Throwable throwable) {
+                Log.error(string, throwable);
+            }
+
+            public void debug(String string) {
+                Log.debug(string);
+            }
+        });
+    }
+
+    public void authenticate(String username, String password) throws UnauthorizedException {
+        try {
+            if (!Shaj.checkPassword(domain, username, password)) {
+                throw new UnauthorizedException();
+            }
+        }
+        catch (UnauthorizedException ue) {
+            throw ue;
+        }
+        catch (Exception e) {
+            throw new UnauthorizedException(e);
+        }
+
+        // See if the user exists in the database. If not, automatically create them.
+        UserManager userManager = UserManager.getInstance();
+        try {
+            userManager.getUser(username);
+        }
+        catch (UserNotFoundException unfe) {
+            try {
+                Log.debug("Automatically creating new user account for " + username);
+                // Create user; use a random password for better safety in the future.
+                // Note that we have to go to the user provider directly -- because the
+                // provider is read-only, UserManager will usually deny access to createUser.
+                UserManager.getUserProvider().createUser(username, StringUtils.randomString(8),
+                        null, null);
+            }
+            catch (UserAlreadyExistsException uaee) {
+                // Ignore.
+            }
+        }
+    }
+
+    public void authenticate(String username, String token, String digest)
+            throws UnauthorizedException
+    {
+        throw new UnsupportedOperationException();
+    }
+
+    public boolean isPlainSupported() {
+        return true;
+    }
+
+    public boolean isDigestSupported() {
+        return false;
+    }
+}

src/java/org/jivesoftware/messenger/user/NativeUserProvider.java

+package org.jivesoftware.messenger.user;
+
+/**
+ * A UserProvider to be used in conjunction with
+ * {@link org.jivesoftware.messenger.auth.NativeAuthProvider NativeAuthProvider}, which
+ * authenticates using OS-level authentication. New user accounts will automatically be
+ * created as needed (upon successful initial authentication) and are subsequently treated as
+ * read-only. To enable this provider, edit the XML config file file and set:
+ *
+ * <pre>
+ * &lt;provider&gt;
+ *     &lt;auth&gt;
+ *         &lt;className&gt;org.jivesoftware.messenger.auth.NativeAuthProvider&lt;/className&gt;
+ *     &lt;/auth&gt;
+ *     &lt;user&gt;
+ *         &lt;className&gt;org.jivesoftware.messenger.user.NativeUserProvider&lt;/className&gt;
+ *     &lt;/user&gt;
+ * &lt;/provider&gt;
+ * </pre>
+ *
+ * @see org.jivesoftware.messenger.auth.NativeAuthProvider NativeAuthProvider
+ *
+ * @author Matt Tucker
+ */
+public class NativeUserProvider extends DefaultUserProvider {
+
+    public boolean isReadOnly() {
+        return true;
+    }
+}