RealmSetServiceAttributeValues.java revision a29d50079096351c50b4dca5a885101c62b55e57
/*
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
*
* Copyright (c) 2006 Sun Microsystems Inc. All Rights Reserved
*
* The contents of this file are subject to the terms
* of the Common Development and Distribution License
* (the License). You may not use this file except in
* compliance with the License.
*
* You can obtain a copy of the License at
* https://opensso.dev.java.net/public/CDDLv1.0.html or
* opensso/legal/CDDLv1.0.txt
* See the License for the specific language governing
* permission and limitations under the License.
*
* When distributing Covered Code, include this CDDL
* Header Notice in each file and include the License file
* at opensso/legal/CDDLv1.0.txt.
* If applicable, add the following below the CDDL Header,
* with the fields enclosed by brackets [] replaced by
* your own identifying information:
* "Portions Copyrighted [year] [name of copyright owner]"
*
* Portions Copyrighted 2016 ForgeRock AS.
*/
package com.sun.identity.cli.realm;
import com.iplanet.sso.SSOException;
import com.iplanet.sso.SSOToken;
import com.sun.identity.cli.AttributeValues;
import com.sun.identity.cli.AuthenticatedCommand;
import com.sun.identity.cli.CLIException;
import com.sun.identity.cli.ExitCodes;
import com.sun.identity.cli.IArgument;
import com.sun.identity.cli.IOutput;
import com.sun.identity.cli.LogWriter;
import com.sun.identity.cli.RequestContext;
import com.sun.identity.idm.AMIdentity;
import com.sun.identity.idm.AMIdentityRepository;
import com.sun.identity.idm.IdRepoException;
import com.sun.identity.sm.OrganizationConfigManager;
import com.sun.identity.sm.SMSException;
import com.sun.identity.sm.ServiceConfig;
import java.text.MessageFormat;
import java.util.HashMap;
import java.util.Iterator;
import java.util.List;
import java.util.Map;
import java.util.Set;
import java.util.logging.Level;
/**
* Set attribute values of a realm.
*/
public class RealmSetServiceAttributeValues extends AuthenticatedCommand {
private static final String OPT_APPEND = "append";
/**
* Services a Commandline Request.
*
* @param rc Request Context.
* @throws CLIException if the request cannot serviced.
*/
public void handleRequest(RequestContext rc)
throws CLIException {
super.handleRequest(rc);
ldapLogin();
SSOToken adminSSOToken = getAdminSSOToken();
IOutput outputWriter = getOutputWriter();
String realm = getStringOptionValue(IArgument.REALM_NAME);
String serviceName = getStringOptionValue(IArgument.SERVICE_NAME);
String datafile = getStringOptionValue(IArgument.DATA_FILE);
List attrValues = rc.getOption(IArgument.ATTRIBUTE_VALUES);
boolean bAppend = isOptionSet(OPT_APPEND);
if ((datafile == null) && (attrValues == null)) {
throw new CLIException(
getResourceString("missing-attributevalues"),
ExitCodes.INCORRECT_OPTION, rc.getSubCommand().getName());
}
Map<String, Set<String>> attributeValues = AttributeValues.parse(getCommandManager(), datafile, attrValues);
attributeValues = processFileAttributes(attributeValues);
try {
AMIdentityRepository repo = new AMIdentityRepository(
adminSSOToken, realm);
AMIdentity ai = repo.getRealmIdentity();
Set servicesFromIdRepo = ai.getAssignedServices();
if (servicesFromIdRepo.contains(serviceName)) {
handleDynamicAttributes(ai, realm, serviceName, attributeValues,
bAppend);
} else {
handleOrganizatioAttribute(realm, serviceName, attributeValues,
bAppend);
}
} catch (IdRepoException e) {
String[] args = {realm, e.getMessage()};
debugError("RealmSetServiceAttributeValues.handleRequest", e);
writeLog(LogWriter.LOG_ERROR, Level.INFO,
"FAILED_SET_SVC_ATTR_VALUES_REALM", args);
throw new CLIException(e,ExitCodes.REQUEST_CANNOT_BE_PROCESSED);
} catch (SSOException e) {
String[] args = {realm, e.getMessage()};
debugError("RealmSetServiceAttributeValues.handleRequest", e);
writeLog(LogWriter.LOG_ERROR, Level.INFO,
"FAILED_SET_SVC_ATTR_VALUES_REALM", args);
throw new CLIException(e,ExitCodes.REQUEST_CANNOT_BE_PROCESSED);
}
}
private void handleDynamicAttributes(
AMIdentity idRealm,
String realm,
String serviceName,
Map attributeValues,
boolean bAppend
) throws CLIException, IdRepoException, SSOException {
String[] params = {realm, serviceName};
IOutput outputWriter = getOutputWriter();
writeLog(LogWriter.LOG_ACCESS, Level.INFO,
"ATTEMPT_SET_SVC_ATTR_VALUES_REALM", params);
if (bAppend) {
Map newValues = new HashMap();
Map currentVal = idRealm.getAttributes(attributeValues.keySet());
for (Iterator i = attributeValues.keySet().iterator(); i.hasNext();)
{
String attrName = (String)i.next();
Set origVal = (Set)currentVal.get(attrName);
Set newVal = (Set)attributeValues.get(attrName);
if ((origVal == null) || origVal.isEmpty()) {
newValues.put(attrName, newVal);
} else {
origVal.addAll(newVal);
newValues.put(attrName, origVal);
}
}
idRealm.modifyService(serviceName, newValues);
} else {
idRealm.modifyService(serviceName, attributeValues);
}
writeLog(LogWriter.LOG_ACCESS, Level.INFO,
"SUCCEED_SET_SVC_ATTR_VALUES_REALM", params);
outputWriter.printlnMessage(MessageFormat.format(
getResourceString("set-svc-attribute-values-realm-succeed"),
(Object[]) params));
}
private void handleOrganizatioAttribute(
String realm,
String serviceName,
Map attributeValues,
boolean bAppend
) throws CLIException {
SSOToken adminSSOToken = getAdminSSOToken();
IOutput outputWriter = getOutputWriter();
try {
OrganizationConfigManager ocm = new OrganizationConfigManager(
adminSSOToken, realm);
if (!ocm.getAssignedServices().contains(serviceName)) {
throw new CLIException(getResourceString(
"realm-set-svc-attr-values-service-not-assigned"),
ExitCodes.REQUEST_CANNOT_BE_PROCESSED);
}
ServiceConfig config = ocm.getServiceConfig(serviceName);
String[] params = {realm, serviceName};
writeLog(LogWriter.LOG_ACCESS, Level.INFO,
"ATTEMPT_SET_SVC_ATTR_VALUES_REALM", params);
if (bAppend) {
for (Iterator i = attributeValues.keySet().iterator();
i.hasNext();
) {
String attributeName = (String)i.next();
Set values = (Set)attributeValues.get(attributeName);
config.addAttribute(attributeName, values);
}
} else {
config.setAttributes(attributeValues);
}
writeLog(LogWriter.LOG_ACCESS, Level.INFO,
"SUCCEED_SET_SVC_ATTR_VALUES_REALM", params);
outputWriter.printlnMessage(getResourceString(
"set-svc-attribute-values-realm-succeed"));
} catch (SSOException e) {
String[] args = {realm, e.getMessage()};
debugError("RealmSetServiceAttributeValues.handleRequest", e);
writeLog(LogWriter.LOG_ERROR, Level.INFO,
"FAILED_SET_SVC_ATTR_VALUES_REALM", args);
throw new CLIException(e,ExitCodes.REQUEST_CANNOT_BE_PROCESSED);
} catch (SMSException e) {
String[] args = {realm, e.getMessage()};
debugError("RealmSetServiceAttributeValues.handleRequest", e);
writeLog(LogWriter.LOG_ERROR, Level.INFO,
"FAILED_SET_SVC_ATTR_VALUES_REALM", args);
throw new CLIException(e,ExitCodes.REQUEST_CANNOT_BE_PROCESSED);
}
}
}