com.ibm.websphere.objectgrid.security.plugins.builtins
Class CertificateMappingAuthenticator

java.lang.Object
  com.ibm.websphere.objectgrid.security.plugins.builtins.CertificateMappingAuthenticator

All Implemented Interfaces:

Authenticator

Deprecated. This plug-in is deprecated in version 8.6. Use the LDAPAuthenticator, the KeyStoreLoginAuthenticator, or a custom Authenticator.

public class CertificateMappingAuthenticator
extends Object
implements Authenticator

This class is an implementation for the Authenticator interface when client certificate authentication is used.

This implementation will extract the base distinguished name (DN) the certificate and create a X500Principal with the DN. A Subject object will also be created with this X500Principal object.

This class is only for sample and quick testing purpose. Users should write your own Authenticator implementation which can fit better into the environment.

Since:

WAS XD 6.0.1

See Also:

Authenticator, ClientCertificateCredential

Constructor Summary

CertificateMappingAuthenticator()
Deprecated. Creates a new CertificateMappingAuthenicator.

Method Summary

Subject

authenticate(Credential credential) Deprecated. Authenticates a ClientCertificateCredential.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertificateMappingAuthenticator

public CertificateMappingAuthenticator()

Deprecated.

Creates a new CertificateMappingAuthenicator.

Method Detail

authenticate

public Subject authenticate(Credential credential)
                     throws InvalidCredentialException,
                            ExpiredCredentialException

Deprecated.

Authenticates a ClientCertificateCredential.

Extracts the distinguished name (DN) associated with the Subject field in the certificate and then creates a X500Principal object. A Subject object is created with this principal object.

Specified by:

authenticate in interface Authenticator

Parameters:

credential - the credential to authenticate

Returns:

a Subject object representing the user

Throws:

InvalidCredentialException - if credential isn't a ClientCertificateCredential or some error occurs during processing of the supplied ClientCertificateCredential

ExpiredCredentialException - if credential is expired. This exception is not used by this implementation

See Also:

Authenticator.authenticate(Credential)