org.globus.gridshib.gt.authorization
Class SAMLMapPIPImpl

java.lang.Object
  org.globus.gridshib.gt.authorization.BasePIP
      org.globus.gridshib.gt.authorization.SAMLMapPIPImpl

All Implemented Interfaces:

GridShibConfigParams, PIP

public class SAMLMapPIPImpl
extends BasePIP
implements GridShibConfigParams

Reads a configuration file containing mappings from attributes to usernames. Adds all mapped usernames to the subject's security context.

Field Summary

Fields inherited from interface org.globus.gridshib.gt.authorization.GridShibConfigParams

AA_INSTANCE_KEY, ALL_CONFIG_KEYS, ATTR_FILE_KEY, AUTHZ_HOST_KEY, BLACKLIST_IP_ADDRESSES_FILE_KEY, BLACKLIST_NAME_IDS_FILE_KEY, CACHE_KEY, CONSULT_GRIDMAP_KEY, DEFAULT_GRIDMAP, ENABLE_ATTRIBUTE_AUTHZ_KEY, ENABLE_ATTRIBUTE_MAPPING_KEY, ENABLE_ATTRIBUTE_QUERY_KEY, ENABLE_BLACKLISTING_KEY, IDP_PROVIDER_ID_KEY, MAP_FILE_KEY, METADATA_PATH_KEY, RESPECT_KEY, SAML_MAP_POLICY_KEY, SHIB_PDP_POLICY_KEY, SP_PROVIDER_ID_KEY, USE_VOMS

Constructor Summary

SAMLMapPIPImpl()

Method Summary

void	collectAttributes(Subject peerSubject, javax.xml.rpc.handler.MessageContext context) TBD
void	initialize(HashMap configs, String name) This method attempts to load a map policy file (MAP_FILE_KEY).

Methods inherited from class org.globus.gridshib.gt.authorization.BasePIP

isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SAMLMapPIPImpl

public SAMLMapPIPImpl()

Method Detail

initialize

public void initialize(HashMap configs,
                       String name)
                throws Exception

This method attempts to load a map policy file (MAP_FILE_KEY). If no such file is configured, the method attempts to load an authorization policy file (ATTR_FILE_KEY) instead. If neither of these policy files are configured, this method disables attribute-based mapping.

Specified by:

initialize in interface PIP

Overrides:

initialize in class BasePIP

Parameters:

configs - a (non-null) map of configuration parameters

name - the scope prefix associated with this PIP implementation

Throws:

IllegalArgumentException - If the configs argument is null

Exception

collectAttributes

public void collectAttributes(Subject peerSubject,
                              javax.xml.rpc.handler.MessageContext context)
                       throws Exception

TBD

Specified by:

collectAttributes in interface PIP

Parameters:

peerSubject - the authenticated subject

context - the message context

Throws:

IllegalArgumentException - If either the peerSubject argument or the context argument is null

Exception