src/org/objectweb/cjdbc/controller/authentication/PasswordAuthenticator.java

説明を見る。

package org.objectweb.cjdbc.controller.authentication;

import javax.management.remote.JMXAuthenticator;
import javax.security.auth.Subject;

import org.objectweb.cjdbc.common.log.Trace;

public class PasswordAuthenticator implements JMXAuthenticator

{

  public static final PasswordAuthenticator NO_AUTHENICATION = new PasswordAuthenticator(
                                                                 null, null);

  static Trace                              logger           = Trace
                                                                 .getLogger("org.objectweb.cjdbc.controller.authentication");

  private String                            username;
  private String                            password;

  public PasswordAuthenticator(String username, String password)
  {
    this.username = username;
    this.password = password;
  }

  public static Object createCredentials(String username, String password)
  {
    return new String[]{username, password};
  }

  public Subject authenticate(Object credentials) throws SecurityException
  {
    try
    {
      if (username == null && password == null)
      {
        // no authentication is required we return
        return new Subject();
      }

      if (credentials == null)
      {
        throw new SecurityException("credentials are required");
      }

      try
      {
        String[] credentialsArray = (String[]) credentials;
        if (username.equals(credentialsArray[0])
            && password.equals(credentialsArray[1]))
        {
          // username and password are ok
          if (logger.isDebugEnabled())
          {
            logger.debug("successfully authenitcated ");
          }
          return new Subject();
        }
      }
      catch (Exception e)
      {
        // the credentials object makes problems, is was probably not created
        // with the createCredentials method
        throw new SecurityException("problems with credentials object : "
            + e.getMessage());
      }

      // username and password do not match
      throw new SecurityException("invalid credentials");
    }
    catch (SecurityException e)
    {
      logger.error(e.getMessage());
      try
      {
        String clientId = java.rmi.server.RemoteServer.getClientHost();
        logger.warn("refused unauthorized access for client " + clientId);
      }
      catch (Exception ex)
      {

      }
      throw e;
    }
  }
}

---