/* * Copyright (c) 1999, 2013, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License version 2 only, as * published by the Free Software Foundation. Oracle designates this * particular file as subject to the "Classpath" exception as provided * by Oracle in the LICENSE file that accompanied this code. * * This code is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * version 2 for more details (a copy is included in the LICENSE file that * accompanied this code). * * You should have received a copy of the GNU General Public License version * 2 along with this work; if not, write to the Free Software Foundation, * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. * * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA * or visit www.oracle.com if you need additional information or have any * questions. */ package com.sun.jndi.ldap; import java.lang.reflect.Constructor; import java.security.AccessController; import java.security.PrivilegedAction; import java.util.Hashtable; import java.util.List; import java.util.Vector; import java.util.Enumeration; import java.util.function.BiFunction; import javax.naming.*; import javax.naming.directory.*; import javax.naming.spi.ObjectFactory; import javax.naming.spi.InitialContextFactory; import javax.naming.ldap.Control; import com.sun.jndi.url.ldap.ldapURLContextFactory; final public class LdapCtxFactory implements ObjectFactory, InitialContextFactory { /** * The type of each address in an LDAP reference. */ public final static String ADDRESS_TYPE = "URL"; // ----------------- ObjectFactory interface -------------------- public Object getObjectInstance(Object ref, Name name, Context nameCtx, Hashtable env) throws Exception { if (!isLdapRef(ref)) { return null; } ObjectFactory factory = new ldapURLContextFactory(); String[] urls = getURLs((Reference)ref); return factory.getObjectInstance(urls, name, nameCtx, env); } // ----------------- InitialContext interface -------------------- public Context getInitialContext(Hashtable envprops) throws NamingException { try { String providerUrl = (envprops != null) ? (String)envprops.get(Context.PROVIDER_URL) : null; // If URL not in environment, use defaults if (providerUrl == null) { return new LdapCtx("", LdapCtx.DEFAULT_HOST, LdapCtx.DEFAULT_PORT, envprops, false); } // Extract URL(s) String[] urls = LdapURL.fromList(providerUrl); if (urls.length == 0) { throw new ConfigurationException(Context.PROVIDER_URL + " property does not contain a URL"); } // Generate an LDAP context return getLdapCtxInstance(urls, envprops); } catch (LdapReferralException e) { if (envprops != null && "throw".equals(envprops.get(Context.REFERRAL))) { throw e; } Control[] bindCtls = (envprops != null)? (Control[])envprops.get(LdapCtx.BIND_CONTROLS) : null; return (LdapCtx)e.getReferralContext(envprops, bindCtls); } } /** * Returns true if argument is an LDAP reference. */ private static boolean isLdapRef(Object obj) { if (!(obj instanceof Reference)) { return false; } String thisClassName = LdapCtxFactory.class.getName(); Reference ref = (Reference)obj; return thisClassName.equals(ref.getFactoryClassName()); } /** * Returns the URLs contained within an LDAP reference. */ private static String[] getURLs(Reference ref) throws NamingException { int size = 0; // number of URLs String[] urls = new String[ref.size()]; Enumeration addrs = ref.getAll(); while (addrs.hasMoreElements()) { RefAddr addr = addrs.nextElement(); if ((addr instanceof StringRefAddr) && addr.getType().equals(ADDRESS_TYPE)) { urls[size++] = (String)addr.getContent(); } } if (size == 0) { throw (new ConfigurationException( "Reference contains no valid addresses")); } // Trim URL array down to size. if (size == ref.size()) { return urls; } String[] urls2 = new String[size]; System.arraycopy(urls, 0, urls2, 0, size); return urls2; } // ------------ Utilities used by other classes ---------------- public static DirContext getLdapCtxInstance(Object urlInfo, Hashtable env) throws NamingException { if (urlInfo instanceof String) { return getUsingURL((String)urlInfo, env); } else if (urlInfo instanceof String[]) { return getUsingURLs((String[])urlInfo, env); } else { throw new IllegalArgumentException( "argument must be an LDAP URL String or array of them"); } } private static DirContext getUsingURL(String url, Hashtable env) throws NamingException { NamingException ne = new NamingException(); DirContext ctx; try { List urls = getDnsUrls(url, env); if (urls.size() == 0) { String factory; if (env.contains(LdapCtx.DNS_PROVIDER)) { factory = (String) env.get(LdapCtx.DNS_PROVIDER); } else { factory = "com.sun.jndi.ldap.DefaultDnsProvider"; } throw new NamingException( factory + " was unable to resolve a valid ldap url"); } for (String u : urls) { LdapURL ldapUrl = new LdapURL(u); String dn = ldapUrl.getDN(); String host = ldapUrl.getHost(); int port = ldapUrl.getPort(); ctx = new LdapCtx(dn, host, port, env, ldapUrl.useSsl()); // Record the URL that created the context ((LdapCtx) ctx).setProviderUrl(u); return ctx; } } catch (Exception e) { ne.setRootCause(e); } throw ne; } @SuppressWarnings("unchecked") private static List getDnsUrls(String url, Hashtable env) throws Exception { BiFunction, List> dnsProvider = null; if (env.containsKey(LdapCtx.DNS_PROVIDER)) { PrivilegedAction act = Thread.currentThread()::getContextClassLoader; ClassLoader cl = AccessController.doPrivileged(act); Class cls = Class.forName( (String) env.get(LdapCtx.DNS_PROVIDER), true, cl); Constructor ctor = cls.getConstructor(); dnsProvider = (BiFunction, List>) ctor.newInstance(); } if (dnsProvider == null) { dnsProvider = new DefaultLdapDnsProvider(); } return dnsProvider.apply(url, env); } /* * Try each URL until one of them succeeds. * If all URLs fail, throw one of the exceptions arbitrarily. * Not pretty, but potentially more informative than returning null. */ private static DirContext getUsingURLs(String[] urls, Hashtable env) throws NamingException { NamingException ne = new NamingException(); DirContext ctx; for (String u : urls) { try { ctx = getUsingURL(u, env); LdapURL ldapUrl = new LdapURL(u); // Associate the derived domain name with the context ((LdapCtx) ctx).setDomainName( ServiceLocator.mapDnToDomainName(ldapUrl.getDN())); return ctx; } catch (AuthenticationException e) { throw e; } catch (NamingException e) { ne = e; } } throw ne; } /** * Used by Obj and obj/RemoteToAttrs too so must be public */ public static Attribute createTypeNameAttr(Class cl) { Vector v = new Vector<>(10); String[] types = getTypeNames(cl, v); if (types.length > 0) { BasicAttribute tAttr = new BasicAttribute(Obj.JAVA_ATTRIBUTES[Obj.TYPENAME]); for (int i = 0; i < types.length; i++) { tAttr.add(types[i]); } return tAttr; } return null; } private static String[] getTypeNames(Class currentClass, Vector v) { getClassesAux(currentClass, v); Class[] members = currentClass.getInterfaces(); for (int i = 0; i < members.length; i++) { getClassesAux(members[i], v); } String[] ret = new String[v.size()]; int i = 0; for (String name : v) { ret[i++] = name; } return ret; } private static void getClassesAux(Class currentClass, Vector v) { if (!v.contains(currentClass.getName())) { v.addElement(currentClass.getName()); } currentClass = currentClass.getSuperclass(); while (currentClass != null) { getTypeNames(currentClass, v); currentClass = currentClass.getSuperclass(); } } }