mcs/class/Novell.Directory.Ldap/Novell.Directory.Ldap.Security.jvm/CreateContextPrivilegedAction.cs

   1 //
   2 // Novell.Directory.Ldap.Security.CreateContextPrivilegedAction.cs
   3 //
   4 // Authors:
   5 //  Boris Kirzner <borsk@mainsoft.com>
   6 //      Konstantin Triger <kostat@mainsoft.com>
   7 //
   8 // (C) 2005 Mainsoft Corporation (http://www.mainsoft.com)
   9 //
  10
  11 //
  12 // Permission is hereby granted, free of charge, to any person obtaining
  13 // a copy of this software and associated documentation files (the
  14 // "Software"), to deal in the Software without restriction, including
  15 // without limitation the rights to use, copy, modify, merge, publish,
  16 // distribute, sublicense, and/or sell copies of the Software, and to
  17 // permit persons to whom the Software is furnished to do so, subject to
  18 // the following conditions:
  19 //
  20 // The above copyright notice and this permission notice shall be
  21 // included in all copies or substantial portions of the Software.
  22 //
  23 // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  24 // EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  25 // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  26 // NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
  27 // LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
  28 // OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
  29 // WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  30 //
  31
  32 using System;
  33
  34 using java.security;
  35 using org.ietf.jgss;
  36
  37 namespace Novell.Directory.Ldap.Security
  38 {
  39         internal class CreateContextPrivilegedAction : PrivilegedAction
  40         {
  41                 #region Fields
  42
  43                 private readonly bool _encryption;
  44                 private readonly bool _signing;
  45                 private readonly bool _delegation;
  46                 private readonly string _name;
  47                 private readonly string _clientName;
  48                 private readonly string _mech;
  49
  50                 #endregion //Fields
  51
  52                 #region Constructors
  53
  54                 public CreateContextPrivilegedAction(string name, string clientName, string mech, bool encryption, bool signing, bool delegation)
  55                 {
  56                         _name = name;
  57                         _clientName = clientName;
  58                         _mech = mech;
  59                         _encryption = encryption;
  60                         _signing = signing;
  61                         _delegation = delegation;
  62                 }
  63
  64                 #endregion // Constructors
  65
  66                 #region Methods
  67
  68                 public object run()
  69                 {
  70                         try {
  71                                 Oid krb5Oid = new Oid (_mech);
  72                                 GSSManager manager = GSSManager.getInstance ();
  73                                 GSSName clientName =
  74                                         manager.createName(_clientName, GSSName__Finals.NT_USER_NAME);
  75                                 GSSCredential clientCreds =
  76                                         manager.createCredential(clientName,
  77                                         GSSContext__Finals.INDEFINITE_LIFETIME,
  78                                         krb5Oid,
  79                                         GSSCredential__Finals.INITIATE_ONLY);
  80
  81 //                              try {
  82                                         GSSName serverName = manager.createName (_name, GSSName__Finals.NT_HOSTBASED_SERVICE, krb5Oid);
  83                                         GSSContext context = manager.createContext (serverName, krb5Oid, clientCreds, GSSContext__Finals.INDEFINITE_LIFETIME);
  84
  85                                         context.requestMutualAuth(true);
  86                                         context.requestConf (_encryption);
  87                                         if (!_encryption || _signing)
  88                                                 context.requestInteg (!_encryption || _signing);
  89                                         context.requestCredDeleg (_delegation);
  90
  91                                         return context;
  92 //                              }
  93 //                              finally {
  94 //                                      // Calling this throws GSSException: Operation unavailable...
  95 //                                      clientCreds.dispose();
  96 //                              }
  97                         }
  98                         catch (GSSException e) {
  99                                 throw new PrivilegedActionException (e);
 100                         }
 101                 }
 102
 103                 #endregion // Methods
 104         }
 105 }