|
Foundation |
|
| |||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
public interface UserServiceInterface
The UserServiceInterface provides mechanisms for storing information about users and retrieving user information. Methods are provided to store and retrieve user contexts, retrieve user profile information, retrieve credential sets, and create new user contexts.
Field Summary |
---|
Fields inherited from interface com.sas.services.RemoteServiceInterface |
---|
CLASS_IDENTIFIER, CLASS_IDENTIFIER_1_1, CLASS_IDENTIFIER_1_2, CLASS_IDENTIFIER_SERVICE_TYPE, CLASS_IDENTIFIER_SERVICE_TYPE_1_1, CLASS_IDENTIFIER_SERVICE_TYPE_1_2 |
Method Summary | |
---|---|
ProfileInterface |
createProfile(UserContextInterface user,
java.lang.String application)
Create a new profile. |
ProfileInterface |
createProfile(UserContextInterface privUser,
UserContextInterface user,
java.lang.String application)
Create a new profile. |
UserContextInterface |
fromByteArray(byte[] data)
Create a UserContext from a byte array returned from the UserContext.toByteArray() method. |
RemoteCallbackHandler |
getChallengeCallbackHandler()
Get the object that will handle credential challenge callbacks. |
boolean |
getGroupLoginEnabled()
Get the flag indicating if group logins are allowed to be used to create User Contexts. |
java.util.List |
getGroups(UserContextInterface user)
Get all the groups that a user belongs to. |
ProfileInterface |
getProfile(PersonInterface person,
java.lang.String application)
Get the profile for a Person object. |
ProfileDomain |
getProfileDefinition(java.lang.String application)
Get the profile definition for an application. |
SummaryData |
getSummaryData(boolean includeDetails)
Get the summary data regarding the active users. |
UserContextInterface |
getUser(java.lang.String user)
Get a user from the user service. |
UserContextInterface |
getUser(UserContextInterface privUser,
java.lang.String user)
Get a user from the user service. |
int |
getUserCount()
Get the count of users that are currently logged in. |
ProfileInterface |
loadProfile(UserContextInterface user,
java.lang.String application)
Get the profile object for the user from the user's connected repositories. |
ProfileInterface |
loadProfile(UserContextInterface searchContext,
UserContextInterface user,
java.lang.String application)
Get the profile object for the user from the searchContext's connected repositories. |
void |
loadUserCredentials(UserContextInterface user)
Get credential sets for a user. |
void |
loadUserCredentials(UserContextInterface searchContext,
UserContextInterface user)
Get credential sets for a user. |
UserContextInterface |
newAuthenticatedUser(javax.security.auth.Subject subject)
Create a new UserContext based on the Subject provided. |
UserContextInterface |
newRemoteUser(SubjectMatter subject)
Create a new UserContext using a SubjectMatter object that is populated with the PFS principals and credentials of an authenticated user. |
UserContextInterface |
newRemoteUser(SubjectMatter subject,
java.util.Map advancedOptions)
Create a new UserContext using a SubjectMatter object that is populated with the PFS principals and credentials of an authenticated user. |
UserContextInterface |
newUser(java.lang.String clientSource,
java.lang.String appSource)
Create a new UserContext based on the current OS identity of the user. |
UserContextInterface |
newUser(java.lang.String clientSource,
java.lang.String appSource,
java.util.Map advancedOptions)
Create a new UserContext based on the current OS identity of the user. |
UserContextInterface |
newUser(java.lang.String uid,
java.lang.String password,
java.lang.String domain)
Create a new user context given a user id, password, and authentication domain. |
UserContextInterface |
newUser(java.lang.String uid,
java.lang.String password,
java.lang.String domain,
java.lang.String clientSource,
java.lang.String appSource)
Create a new user context given a user id, password, and authentication domain. |
UserContextInterface |
newUser(UserContext privUser,
java.lang.String uid,
java.lang.String password,
java.lang.String domain)
Create a new user context given a privileged context, user id, password, and authentication domain. |
UserContextInterface |
newUser(UserContext privUser,
java.lang.String uid,
java.lang.String password,
java.lang.String domain,
java.lang.String clientSource,
java.lang.String appSource)
Create a new user context given a privileged context, user id, password, and authentication domain. |
UserContextInterface |
newUser(UserContext privUser,
java.lang.String uid,
java.lang.String password,
java.lang.String domain,
java.lang.String clientSource,
java.lang.String appSource,
java.util.Map advancedOptions)
Create a new user context given a privileged context, user id, password, and authentication domain. |
UserIdentityInterface |
newUserIdentity(java.lang.Object principal,
java.lang.Object credential,
java.lang.String domain,
java.lang.String mechanism)
Return a new user identity object given the Pricipal, credential, domain, and authentication mechanism. |
UserContextInterface |
newUserWithInfoService(UserContext privUser,
java.lang.String uid,
java.lang.String password,
java.lang.String domain,
InformationServiceInterface infoService)
Deprecated. This method should no longer be used. In order for the platform to effectively direct requests in a clustered environment, the Discovery Service needs to be able to select the correct available service rather than having the client specify one. |
boolean |
removeUser(UserContextInterface user)
Remove a user from the user service. |
void |
resetInternalPassword(java.lang.String host,
java.lang.String port,
java.lang.String username,
java.lang.String oldPassword,
java.lang.String newPassword)
Reset a user's internal metadata password. |
void |
setChallengeCallbackHandler(RemoteCallbackHandler handler)
Set the object that will be used to handle credential challenge callbacks. |
void |
setGroupLoginEnabled(boolean groupLoginFlag)
Set the UserService to allow group logins to be used to create User Contexts. |
void |
setUser(UserContextInterface user)
Add a user to the user service. |
void |
userDestroyed(UserContextInterface user)
For internal use only. |
Methods inherited from interface com.sas.services.RemoteServiceInterface |
---|
configure, destroy, getCreationTime, getServiceConfiguration, getServiceConfiguration, getServiceProxy, getServiceState, isAccessibleToRemoteClients, isExported, reconfigure, setServiceState |
Methods inherited from interface com.sas.services.mgmt.ServiceNotificationBroadcasterInterface |
---|
addServiceObserver, notifyServiceObservers, removeAllServiceObservers, removeServiceObserver |
Method Detail |
---|
void setUser(UserContextInterface user) throws java.rmi.RemoteException
user
- A new user context to add to the service.
java.rmi.RemoteException
- in the event of remote object failure.boolean removeUser(UserContextInterface user) throws java.rmi.RemoteException
user
- The user to remove.
java.rmi.RemoteException
- in the event of remote object failure.UserContextInterface getUser(java.lang.String user) throws java.rmi.RemoteException
user
- The user to retrieve. The string
may be the name or key. The name is checked
first. If it's found, the user is returned.
If not, the key is searched.
java.rmi.RemoteException
- in the event of remote object failure.UserContextInterface getUser(UserContextInterface privUser, java.lang.String user) throws java.rmi.RemoteException
privUser
- A UserContext whose principals will be checked for permission
to perform the getUser function. This can be null, but if the method is
invoked remotely, it will always fail with a null UserContext.user
- The user to retrieve. The string
may be the name or key. The name is checked
first. If it's found, the user is returned.
If not, the key is searched.
java.rmi.RemoteException
- in the event of remote object failure.UserIdentityInterface newUserIdentity(java.lang.Object principal, java.lang.Object credential, java.lang.String domain, java.lang.String mechanism) throws java.rmi.RemoteException, ServiceException
principal
- An object (usually a string) that represents the user within
a security domain.credential
- An object that is used to authenticate a principal. Depending
on the mechanism, this may be a password string, or a complex object such as
a certificate.domain
- A String representing a security domain. While this string is
arbitrary, it should be consistent within an installation so that credential
sets match with services.mechanism
- A String that indicates the authentication mechanism to use, e.g.,
"simple", "Kerberos", etc.
ServiceException
- in the event of service object failure;
java.rmi.RemoteException
- in the event of remote object failure.java.util.List getGroups(UserContextInterface user) throws ServiceException, java.rmi.RemoteException
user
- The UserContext to find groups for.
IdentityGroupInterface
objects that represent the groups the user is a member of.
ServiceException
- in the event of service object failure.
java.rmi.RemoteException
- in the event of remote object failure.ProfileDomain getProfileDefinition(java.lang.String application) throws ServiceException, java.rmi.RemoteException
application
- The application to get the profile definition for.
ServiceException
- In the event of a service failure.
java.rmi.RemoteException
- in the event of a network problem.ProfileInterface loadProfile(UserContextInterface user, java.lang.String application) throws java.rmi.RemoteException, ServiceException
user
- The user to retrieve the profile for.application
- The name of the application requesting profile information.
ServiceException
- in the event of Platform Service failure.
java.rmi.RemoteException
- in the event of remote object failure.ProfileInterface loadProfile(UserContextInterface searchContext, UserContextInterface user, java.lang.String application) throws java.rmi.RemoteException, ServiceException
searchContext
- The UserContext to use to search for the profile information.user
- The user to retrieve the profile for.application
- The name of the application requesting profile information.
ServiceException
- in the event of Service failure.
java.rmi.RemoteException
- in the event of remote object failure.ProfileInterface createProfile(UserContextInterface user, java.lang.String application) throws ServiceException, java.rmi.RemoteException
user
- The UserContextInterface of the user for whom the Profile
is being created.application
- The application string for the new profile.
ServiceException
- in the event of a service failure.
java.rmi.RemoteException
- in the event of network failure.ProfileInterface createProfile(UserContextInterface privUser, UserContextInterface user, java.lang.String application) throws ServiceException, java.rmi.RemoteException
privUser
- A privileged user context to use to create the
new profile entry in the repository.user
- The UserContextInterface of the user for whom the Profile
is being created.application
- The application string for the new profile.
ServiceException
- in the event of a service failure.
java.rmi.RemoteException
- in the event of network failure.void loadUserCredentials(UserContextInterface user) throws ServiceException, java.rmi.RemoteException
user
- The user context to use to search and update with identities.
ServiceException
- In the event of a repository failure.
java.rmi.RemoteException
- in the event of remote object failure.ProfileInterface getProfile(PersonInterface person, java.lang.String application) throws ServiceException, java.rmi.RemoteException
person
- The person to retrieve the profile for.application
- The application whose profile you want.
ServiceException
- In the event of a repository failure.
java.rmi.RemoteException
- in the event of a network error.void loadUserCredentials(UserContextInterface searchContext, UserContextInterface user) throws ServiceException, java.rmi.RemoteException
searchContext
- The user context to use to perform the search. The repository
connections in this context will be used for the search(s).user
- The user context to update with any identities found in the repository(s).
ServiceException
- In the event of a repository failure.
java.rmi.RemoteException
- in the event of remote object failure.UserContextInterface newUser(java.lang.String clientSource, java.lang.String appSource) throws ServiceException, java.rmi.RemoteException, UserInitializationException
clientSource
- A String (normally an IP address) that indicates the
client location that initiated the login request.appSource
- A String that identifies the application that is
initiating the request. This should either be the main Java class
name or an identifiable application name.
UserInitializationException
- in the event of possibly recoverable
exceptions during UserContext initialization.
ServiceException
- if an unrecoverable exception occurs.
java.rmi.RemoteException
- in the event of a network error.UserContextInterface newUser(java.lang.String clientSource, java.lang.String appSource, java.util.Map advancedOptions) throws ServiceException, java.rmi.RemoteException, UserInitializationException
clientSource
- A String (normally an IP address) that indicates the
client location that initiated the login request.appSource
- A String that identifies the application that is
initiating the request. This should either be the main Java class
name or an identifiable application name.advancedOptions
- MapUserInitializationException
- in the event of possibly recoverable
exceptions during UserContext initialization.
ServiceException
- if an unrecoverable exception occurs.
java.rmi.RemoteException
- in the event of a network error.UserContextInterface newUser(java.lang.String uid, java.lang.String password, java.lang.String domain) throws java.rmi.RemoteException, ServiceException, UserInitializationException
uid
- The user ID for the new userpassword
- The password for the new user.domain
- The authentication domain for the user.
UserInitializationException
- in the event of possibly recoverable
exceptions during UserContext initialization.
ServiceException
- in the event of service failure.
java.rmi.RemoteException
- in the event of remote object failure.UserContextInterface newUser(java.lang.String uid, java.lang.String password, java.lang.String domain, java.lang.String clientSource, java.lang.String appSource) throws java.rmi.RemoteException, ServiceException, UserInitializationException
uid
- The user ID for the new userpassword
- The password for the new user.domain
- The authentication domain for the user.clientSource
- A String (normally an IP address) that indicates the
client location that initiated the login request.appSource
- A String that identifies the application that is
initiating the request. This should either be the main Java class
name or an identifiable application name.
UserInitializationException
- in the event of possibly recoverable
exceptions during UserContext initialization.
ServiceException
- in the event of service failure.
java.rmi.RemoteException
- in the event of remote object failure.UserContextInterface newUser(UserContext privUser, java.lang.String uid, java.lang.String password, java.lang.String domain) throws java.rmi.RemoteException, ServiceException, UserInitializationException
privUser
- The user context to use to search for credentials that the
user himself may not be allowed to see. This may be null in order to use
the user's own authenticated connection to search for credentials.uid
- The user ID for the new userpassword
- The password for the new user.domain
- The authentication domain for the user. A null domain will cause
a ServiceException to be thrown.
UserInitializationException
- in the event of possibly recoverable
exceptions during UserContext initialization.
ServiceException
- if an unrecoverable exception occurs.
java.rmi.RemoteException
- in the event of a network error.UserContextInterface newUser(UserContext privUser, java.lang.String uid, java.lang.String password, java.lang.String domain, java.lang.String clientSource, java.lang.String appSource) throws java.rmi.RemoteException, ServiceException, UserInitializationException
privUser
- The user context to use to search for credentials that the
user himself may not be allowed to see. This may be null in order to use
the user's own authenticated connection to search for credentials.uid
- The user ID for the new userpassword
- The password for the new user.domain
- The authentication domain for the user. A null domain will cause
a ServiceException to be thrown.clientSource
- A String (normally an IP address) that indicates the
client location that initiated the login request.appSource
- A String that identifies the application that is
initiating the request. This should either be the main Java class
name or an identifiable application name.
UserInitializationException
- in the event of possibly recoverable
exceptions during UserContext initialization.
ServiceException
- if an unrecoverable exception occurs.
java.rmi.RemoteException
- in the event of a network error.UserContextInterface newUser(UserContext privUser, java.lang.String uid, java.lang.String password, java.lang.String domain, java.lang.String clientSource, java.lang.String appSource, java.util.Map advancedOptions) throws java.rmi.RemoteException, ServiceException, UserInitializationException
privUser
- The user context to use to search for credentials that the
user himself may not be allowed to see. This may be null in order to use
the user's own authenticated connection to search for credentials.uid
- The user ID for the new userpassword
- The password for the new user.domain
- The authentication domain for the user. A null domain will cause
a ServiceException to be thrown.clientSource
- A String (normally an IP address) that indicates the
client location that initiated the login request.appSource
- A String that identifies the application that is
initiating the request. This should either be the main Java class
name or an identifiable application name.advancedOptions
- MapUserInitializationException
- in the event of possibly recoverable
exceptions during UserContext initialization.
ServiceException
- if an unrecoverable exception occurs.
java.rmi.RemoteException
- in the event of a network error.UserContextInterface newUserWithInfoService(UserContext privUser, java.lang.String uid, java.lang.String password, java.lang.String domain, InformationServiceInterface infoService) throws java.rmi.RemoteException, ServiceException, UserInitializationException
privUser
- The user context to use to search for credentials that the
user himself may not be allowed to see. This may be null in order to use
the user's authenticated connection to look for credentials.uid
- The user ID for the new userpassword
- The password for the new user.domain
- The authentication domain for the user. A null domain will cause
a ServiceException to be thrown.infoService
- A handle to an InformationService to use to make any
repository connections.
ServiceException
- For authentication failure, or unrecoverable service failure.
UserInitializationException
- if an error occurs, but the UserContext may
still be useful.
java.rmi.RemoteException
- in the event of a network error.UserContextInterface newRemoteUser(SubjectMatter subject) throws java.rmi.RemoteException, ServiceException, UserInitializationException
subject
- A SubjectMatter object with the principals and credentials.
java.rmi.RemoteException
- In the event of remote object failure.
ServiceException
- If a service level exception occurs.
UserInitializationException
- If a recoverable exception occurs setting
up the UserContext.UserContextInterface newRemoteUser(SubjectMatter subject, java.util.Map advancedOptions) throws java.rmi.RemoteException, ServiceException, UserInitializationException
subject
- A SubjectMatter object with the principals and credentials.advancedOptions
- Mapjava.rmi.RemoteException
- In the event of remote object failure.
ServiceException
- If a service level exception occurs.
UserInitializationException
- If a recoverable exception occurs setting
up the UserContext.UserContextInterface newAuthenticatedUser(javax.security.auth.Subject subject) throws java.rmi.RemoteException, ServiceException, UserInitializationException
subject
- A javax.security.auth.Subject to use to create a new
UserContext. If the subject is null, the current subject from
the AccessController context will be used (set from a doAs). If
that's null, a ServiceException will be thrown.
ServiceException
- if a service error occurs.
UserInitializationException
- if there's a recoverable error during
UserContext initialization.
java.rmi.RemoteException
- in the event of remote object failure.void setChallengeCallbackHandler(RemoteCallbackHandler handler) throws java.rmi.RemoteException
handler
- The credential callback handler. This object will have to be
an implementation of the javax.security.auth.callback.CallbackHandler
interface.
java.rmi.RemoteException
- In the event of a remote failure.RemoteCallbackHandler getChallengeCallbackHandler() throws java.rmi.RemoteException
java.rmi.RemoteException
- in the event of a remote failure.int getUserCount() throws ServiceException, java.rmi.RemoteException
ServiceException
- if a service level error occurs.
java.rmi.RemoteException
- In the event of remote object failure.void setGroupLoginEnabled(boolean groupLoginFlag) throws ServiceException, java.rmi.RemoteException
groupLoginFlag
- True to allow group logins, false to prevent them.
The default at initialization is to disallow group logins.
ServiceException
- If a service level error occurs.
java.rmi.RemoteException
- In the event of remote object failure.boolean getGroupLoginEnabled() throws ServiceException, java.rmi.RemoteException
ServiceException
- If a service level error occurs.
java.rmi.RemoteException
- In the event of remote object failure.SummaryData getSummaryData(boolean includeDetails) throws ServiceException, java.rmi.RemoteException
includeDetails
- If true, the active user details and
failure detail data will be included.
SummaryData
objects.
ServiceException
- If a service level error occurs.
java.rmi.RemoteException
- In the event of remote object failure.UserContextInterface fromByteArray(byte[] data) throws ServiceException, java.rmi.RemoteException
UserContext.toByteArray()
method.
data
-
ServiceException
- If a service level exception occurs.
java.rmi.RemoteException
- In the event of remote object failure.void resetInternalPassword(java.lang.String host, java.lang.String port, java.lang.String username, java.lang.String oldPassword, java.lang.String newPassword) throws ServiceException, java.rmi.RemoteException
host
- The DNS hostname where the metadata server is running.port
- The IP port the metadata server is listening on.username
- The Name of the Person whose internal password is being reset.oldPassword
- The old internal password.newPassword
- The new internal password.
ServiceException
- In the event of communication failure, or an error
resetting the password.
java.rmi.RemoteException
- In the event of remote object failure.void userDestroyed(UserContextInterface user) throws ServiceException, java.rmi.RemoteException
user
- A user being destroyed.
ServiceException
- In case of service error.
java.rmi.RemoteException
- In the event of remote object failure.
|
Foundation |
|
| |||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |