net.sf.michaelo.tomcat.realm.mapper

Class SamAccountNameRfc2247Mapper

java.lang.Object

net.sf.michaelo.tomcat.realm.mapper.SamAccountNameMapper

net.sf.michaelo.tomcat.realm.mapper.SamAccountNameRfc2247Mapper

All Implemented Interfaces:

UsernameSearchMapper

public class SamAccountNameRfc2247Mapper
extends SamAccountNameMapper

A mapper for the AD attribute sAMAccountName and the realm. This mapper splits the GSS name in the primary and realm component. The instance component is completely ignored. The primary component is assigned to the sAMAccountName and the realm is transformed to a search base according to RFC 2247. Moreover, this implementation mimics DsCrackNames with formatOffered set to DS_USER_PRINCIPAL_NAME and formatDesired set to DS_FQDN_1779_NAME. Verified against Samba's implementation of DsCrackNames.

Note: This mapper requires to operate from the RootDSE of a domain controller or better yet, a GC. No root DN normalization (stripping DC components) happens here (yet).

Version:

$Id: SamAccountNameRfc2247Mapper.java 336 2019-11-22 11:45:45Z michael-o $

Nested Class Summary

Nested classes/interfaces inherited from class net.sf.michaelo.tomcat.realm.mapper.SamAccountNameMapper

SamAccountNameMapper.SamAccountNameMappedValues

Nested classes/interfaces inherited from interface net.sf.michaelo.tomcat.realm.mapper.UsernameSearchMapper

UsernameSearchMapper.MappedValues

Constructor Summary

Constructors

Constructor and Description
SamAccountNameRfc2247Mapper()

Method Summary

Modifier and Type	Method and Description
UsernameSearchMapper.MappedValues	map(DirContext context, GSSName gssName) Maps a GSS name to AD search parameters.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SamAccountNameRfc2247Mapper

public SamAccountNameRfc2247Mapper()

Method Detail

map

public UsernameSearchMapper.MappedValues map(DirContext context,
                                             GSSName gssName)
                                      throws NamingException

Description copied from interface: UsernameSearchMapper

Maps a GSS name to AD search parameters. A mapper implementation must assure that the user can be found in the given context when an approriate GSS name is presented. The implementor must be aware that the returned search base might need to be relativized to the root DN of the context.

Parameters:

context - the search context

gssName - the GSS name to be mapped

Returns:

mapped values for user retrieval

Throws:

NamingException - if a context-related error has occured