org.dcache.xrootd.plugins.authn.gsi

Class GSIAuthenticationHandler

java.lang.Object

org.dcache.xrootd.plugins.authn.gsi.GSIAuthenticationHandler

All Implemented Interfaces:

AuthenticationHandler

public class GSIAuthenticationHandler
extends Object
implements AuthenticationHandler

Handler for xrootd-security message exchange based on the GSI protocol. Loosely based on the first reverse-engineering of xrootdsec-gsi, done by Martin Radicke.

Field Summary

Fields

Modifier and Type	Field and Description
protected static org.slf4j.Logger	LOGGER

Constructor Summary

Constructors

Constructor and Description
GSIAuthenticationHandler(GSICredentialManager credentialManager)

Method Summary

Modifier and Type	Method and Description
XrootdResponse<AuthenticationRequest>	authenticate(AuthenticationRequest request) dispatcher function that initializes the diffie-hellman key agreement session, checks the request for the correct protocol and calls the actual handler functions.
BufferDecrypter	getDecrypter()
String	getProtocol()
Subject	getSubject()
boolean	isCompleted()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

LOGGER

protected static final org.slf4j.Logger LOGGER

Constructor Detail

GSIAuthenticationHandler

public GSIAuthenticationHandler(GSICredentialManager credentialManager)

Method Detail

authenticate

public XrootdResponse<AuthenticationRequest> authenticate(AuthenticationRequest request)
                                                   throws XrootdException

dispatcher function that initializes the diffie-hellman key agreement session, checks the request for the correct protocol and calls the actual handler functions.

Specified by:

authenticate in interface AuthenticationHandler

Throws:

XrootdException

getDecrypter

public BufferDecrypter getDecrypter()

Specified by:

getDecrypter in interface AuthenticationHandler

getProtocol

public String getProtocol()

Specified by:

getProtocol in interface AuthenticationHandler

Returns:

the supported protocol. The protocol string also contains metainformation such as the host-certificate subject hash.

getSubject

public Subject getSubject()

Specified by:

getSubject in interface AuthenticationHandler

isCompleted

public boolean isCompleted()

Specified by:

isCompleted in interface AuthenticationHandler