Package cz.metacentrum.perun.core.impl.modules.pwdmgr

Class EinfraPasswordManagerModule

java.lang.Object

cz.metacentrum.perun.core.impl.modules.pwdmgr.GenericPasswordManagerModule

cz.metacentrum.perun.core.impl.modules.pwdmgr.EinfraPasswordManagerModule

All Implemented Interfaces:

PasswordManagerModule

Direct Known Subclasses:

SambaduPasswordManagerModule

public class EinfraPasswordManagerModule
extends GenericPasswordManagerModule

Password manager for EINFRA login-namespace. It provides custom checks on login format and password strength. Also implementation for alternative passwords is customized.

It calls generic pwd manager script logic with ".einfra"

Author:

Pavel Zlamal <zlamal@cesnet.cz>

Field Summary

Fields

Modifier and Type	Field	Description
protected final Pattern	einfraLoginPattern
protected final Pattern	einfraPasswordContainsDigit
protected final Pattern	einfraPasswordContainsLower
protected final Pattern	einfraPasswordContainsSpec
protected final Pattern	einfraPasswordContainsUpper
protected final int	einfraPasswordMinLength

Fields inherited from class cz.metacentrum.perun.core.impl.modules.pwdmgr.GenericPasswordManagerModule

actualLoginNamespace, altPasswordManagerProgram, BIN_TRUE, DEFAULT_LOGIN_PATTERN, LOGIN_EXIST, PASSWORD_CHANGE, PASSWORD_CHECK, PASSWORD_CREATE, PASSWORD_DELETE, PASSWORD_RESERVE, PASSWORD_RESERVE_RANDOM, PASSWORD_VALIDATE, passwordManagerProgram, randomPasswordCharacters, randomPasswordLength, WEAKPASS

Fields inherited from interface cz.metacentrum.perun.core.implApi.modules.pwdmgr.PasswordManagerModule

ALT_PASSWORD_PREFIX, BIRTH_DAY_KEY, BIRTH_NUMBER_KEY, FIRST_NAME_KEY, LAST_NAME_KEY, LOGIN_PREFIX, MAIL_KEY, PASSWORD_KEY, TITLE_AFTER_KEY, TITLE_BEFORE_KEY

Constructor Summary

Constructors

Constructor	Description
EinfraPasswordManagerModule()

Method Summary

Modifier and Type	Method	Description
void	checkLoginFormat(PerunSession sess, String login)
void	checkPasswordStrength(PerunSession sess, String login, String password)
void	createAlternativePassword(PerunSession sess, User user, String passwordId, String password)
void	deleteAlternativePassword(PerunSession sess, User user, String passwordId)
String	handleSponsorship(PerunSession sess, SponsoredUserData userData)	Handles member's sponsorship in given namespace.
boolean	isLoginPermitted(PerunSession sess, String login)	Checks, if the login is permitted for the Einfra namespace.
void	reserveRandomPassword(PerunSession sess, String userLogin)
void	validatePassword(PerunSession sess, String userLogin, User user)

Methods inherited from class cz.metacentrum.perun.core.impl.modules.pwdmgr.GenericPasswordManagerModule

changePassword, checkPassword, createAltPwdManagerProcess, createPwdManagerProcess, deletePassword, generateAccount, generateRandomPassword, getActualLoginNamespace, handleAltPwdManagerExit, handleExit, handleGenericErrorCode, loginExist, reservePassword, sendPassword, setActualLoginNamespace

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

einfraLoginPattern

protected final Pattern einfraLoginPattern

einfraPasswordContainsDigit

protected final Pattern einfraPasswordContainsDigit

einfraPasswordContainsLower

protected final Pattern einfraPasswordContainsLower

einfraPasswordContainsUpper

protected final Pattern einfraPasswordContainsUpper

einfraPasswordContainsSpec

protected final Pattern einfraPasswordContainsSpec

einfraPasswordMinLength

protected final int einfraPasswordMinLength

See Also:

• Constant Field Values

Constructor Details

EinfraPasswordManagerModule

public EinfraPasswordManagerModule()

Method Details

checkLoginFormat

public void checkLoginFormat(PerunSession sess,
 String login)
                      throws InvalidLoginException

Specified by:

checkLoginFormat in interface PasswordManagerModule

Overrides:

checkLoginFormat in class GenericPasswordManagerModule

Throws:

InvalidLoginException

checkPasswordStrength

public void checkPasswordStrength(PerunSession sess,
 String login,
 String password)
                           throws PasswordStrengthException

Specified by:

checkPasswordStrength in interface PasswordManagerModule

Overrides:

checkPasswordStrength in class GenericPasswordManagerModule

Throws:

PasswordStrengthException

createAlternativePassword

public void createAlternativePassword(PerunSession sess,
 User user,
 String passwordId,
 String password)
                               throws PasswordStrengthException

Specified by:

createAlternativePassword in interface PasswordManagerModule

Overrides:

createAlternativePassword in class GenericPasswordManagerModule

Throws:

PasswordStrengthException

deleteAlternativePassword

public void deleteAlternativePassword(PerunSession sess,
 User user,
 String passwordId)

Specified by:

deleteAlternativePassword in interface PasswordManagerModule

Overrides:

deleteAlternativePassword in class GenericPasswordManagerModule

handleSponsorship

public String handleSponsorship(PerunSession sess,
 SponsoredUserData userData)
                         throws InvalidLoginException,
PasswordStrengthException

Description copied from interface: PasswordManagerModule

Handles member's sponsorship in given namespace. Returns login, which should be used in the given namespace. This method is usually used to create an account in external systems.

Parameters:

sess - session

userData - information, about the user for which the sponsorship should be handled

Returns:

login, or null, if no login was provided nor generated

Throws:

InvalidLoginException - if the provided login is invalid for the given namespace

PasswordStrengthException - if the password strength is too weak for given namespace

isLoginPermitted

public boolean isLoginPermitted(PerunSession sess,
 String login)

Checks, if the login is permitted for the Einfra namespace.

Login is verified in the given priority: 1) If the login is exceptionally allowed, returns true. 2) If the login matches some of the hardcoded prefixes, returns false. 3) Checks the specified login format in the instance configuration.

Parameters:

sess - session

login - checked login

Returns:

true, if the given login is permitted, false otherwise

reserveRandomPassword

public void reserveRandomPassword(PerunSession sess,
 String userLogin)
                           throws InvalidLoginException

Specified by:

reserveRandomPassword in interface PasswordManagerModule

Overrides:

reserveRandomPassword in class GenericPasswordManagerModule

Throws:

InvalidLoginException

validatePassword

public void validatePassword(PerunSession sess,
 String userLogin,
 User user)
                      throws InvalidLoginException

Specified by:

validatePassword in interface PasswordManagerModule

Overrides:

validatePassword in class GenericPasswordManagerModule

Throws:

InvalidLoginException