bee2440354b4bc8796e1de0b6cbd60e1f68deba0Phill Cunnington/*
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster *
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * Copyright (c) 2005 Sun Microsystems Inc. All Rights Reserved
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster *
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * The contents of this file are subject to the terms
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * of the Common Development and Distribution License
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * (the License). You may not use this file except in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * compliance with the License.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster *
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * You can obtain a copy of the License at
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * https://opensso.dev.java.net/public/CDDLv1.0.html or
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * opensso/legal/CDDLv1.0.txt
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * See the License for the specific language governing
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * permission and limitations under the License.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster *
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * When distributing Covered Code, include this CDDL
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * Header Notice in each file and include the License file
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * at opensso/legal/CDDLv1.0.txt.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * If applicable, add the following below the CDDL Header,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * with the fields enclosed by brackets [] replaced by
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * your own identifying information:
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * "Portions Copyrighted [year] [name of copyright owner]"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster *
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster * $Id: GroupResolver.java,v 1.4 2009/01/28 05:34:50 ww203982 Exp $
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster *
bee2440354b4bc8796e1de0b6cbd60e1f68deba0Phill Cunnington * Portions Copyright 2015 ForgeRock AS.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster */
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster
8af80418ba1ec431c8027fa9668e5678658d3611Allan Fosterpackage com.iplanet.ums;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster
8af80418ba1ec431c8027fa9668e5678658d3611Allan Fosterimport com.sun.identity.shared.debug.Debug;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Fosterimport com.iplanet.services.ldap.Attr;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Fosterimport com.iplanet.services.ldap.AttrSet;
bee2440354b4bc8796e1de0b6cbd60e1f68deba0Phill Cunningtonimport org.forgerock.i18n.LocalizedIllegalArgumentException;
bee2440354b4bc8796e1de0b6cbd60e1f68deba0Phill Cunningtonimport org.forgerock.opendj.ldap.DN;
bee2440354b4bc8796e1de0b6cbd60e1f68deba0Phill Cunningtonimport org.forgerock.opendj.ldap.LDAPUrl;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster
8af80418ba1ec431c8027fa9668e5678658d3611Allan Fosterpublic class GroupResolver extends DefaultClassResolver {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster private static Debug debug;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster static {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster debug = Debug.getInstance(IUMSConstants.UMS_DEBUG);
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster public Class resolve(String id, AttrSet set) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Class c = super.resolve(id, set);
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if ((c != null) && c.equals(com.iplanet.ums.DynamicGroup.class)) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Attr attr = set.getAttribute("memberurl");
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if (attr != null) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster String[] vals = attr.getStringValues();
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if ((vals != null) && (vals.length > 0)) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if (isAssignable(id, vals[0])) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster c = com.iplanet.ums.AssignableDynamicGroup.class;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster return c;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster private boolean isAssignable(String id, String val) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster try {
bee2440354b4bc8796e1de0b6cbd60e1f68deba0Phill Cunnington LDAPUrl url = LDAPUrl.valueOf(val);
bee2440354b4bc8796e1de0b6cbd60e1f68deba0Phill Cunnington String filter = url.getFilter().toString().trim();
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if (debug.messageEnabled()) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster debug.message("AssignableDynamicGroup.GroupResolver."
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster + "isAssignable: filter = <" + filter + ">");
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if ((filter.startsWith("(")) && (filter.endsWith(")"))) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster filter = filter.substring(1, filter.length() - 1);
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if (debug.messageEnabled()) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster debug.message("AssignableDynamicGroup.GroupResolver."
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster + "isAssignable: adjusted to <" + filter + ">");
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster int ind = filter.indexOf('=');
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if (ind > 0) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster String attrName = filter.substring(0, ind);
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if (debug.messageEnabled()) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster debug.message("AssignableDynamicGroup.GroupResolver."
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster + "isAssignable: attrName = <" + attrName + ">");
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if (attrName.equalsIgnoreCase("memberof")) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster String attrVal = filter.substring(ind + 1).trim();
ce4d3fddc8fe2eddd68a20af9570b3cc63ece5abNeil Madden DN dn = DN.valueOf(guidToDN(attrVal));
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if (debug.messageEnabled()) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster debug.message("AssignableDynamicGroup.GroupResolver."
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster + "isAssignable: comparing <" + dn + "> to <"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster + id + ">");
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
ce4d3fddc8fe2eddd68a20af9570b3cc63ece5abNeil Madden return dn.equals(DN.valueOf(guidToDN(id)));
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
bee2440354b4bc8796e1de0b6cbd60e1f68deba0Phill Cunnington } catch (LocalizedIllegalArgumentException ex) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster // TODO - Log Exception
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster if (debug.messageEnabled()) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster debug.message("AssignableDynamicGroup.isAssignable : "
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster + "Exception : " + ex.getMessage());
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster return false;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster private String guidToDN(String id) {
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster return id;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster }
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster}