org.apache.jetspeed.modules.actions
Class NTLMSessionValidator

java.lang.Object
  org.apache.turbine.modules.Assembler
      org.apache.turbine.modules.Action
          org.apache.turbine.modules.actions.sessionvalidator.SessionValidator
              org.apache.jetspeed.modules.actions.TemplateSessionValidator
                  org.apache.jetspeed.modules.actions.NTLMSessionValidator

public class NTLMSessionValidator

extends TemplateSessionValidator

Just like org.apache.turbine.modules.actions.sessionvalidator.TemplateSessionValidator except:

• it doesn't check the session_access_counter
• it automatically logs the user in based on currently authenticated nt user
• expects a JetspeedRunData object and put there the additionnal jetspeed properties

Usage of this session validator is limited to Windows NT/2000 and MS Internet Explorer.

To activate this session validator, set action.sessionvalidator in tr.props to NTLMSessionValidator.

When this session validator is active, the following algorithm is used to display appropriate psml:

 Check authentication status
 If user is not authenticated to machine running the portal
      Pop the standard login box
      If user passes authentication
           Attempt to retrieve matching user profile
           If matching profile found
                Render the profile
           Else
                Retrieve and render anonymous profile
           End
      Else If authentication fails
           Keep prompting for login information
      Else If the user cancels the login box
           Retrieve and render anonymous profile
      End
 Else
      Attempt to retrieve matching user profile
      If matching profile found
           Render the profile
      Else
           Retrieve and render anonymous profile
      End
 End
 

Optionally, certain characters may be removed from the username before it's passed to the JetspeedSecurity. These characters may be specified by setting NTLMSessionValidator.chars.to.remove property. For example, if invalid characters list is '#@$', username '#user1' will be returned as 'user1'.

Since:

1.4b5

Version:

$Id: NTLMSessionValidator.java,v 1.6 2004/02/23 02:59:06 jford Exp $

Author:

Mark Orciuch

See Also:

TemplateSessionValidator, http://www.innovation.ch/java/ntlm.html

Constructor Summary

NTLMSessionValidator()

Method Summary

void	doPerform(org.apache.turbine.util.RunData data) Execute the action.
boolean	requiresNewSession(org.apache.turbine.util.RunData data) This session validator does not require a new session for each request

Methods inherited from class org.apache.turbine.modules.Action

perform

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NTLMSessionValidator

public NTLMSessionValidator()

Method Detail

doPerform

public void doPerform(org.apache.turbine.util.RunData data)
               throws java.lang.Exception

Execute the action.

Overrides:

doPerform in class TemplateSessionValidator

Parameters:

data - Turbine information.

Throws:

Exception, - a generic exception.

java.lang.Exception

requiresNewSession

public boolean requiresNewSession(org.apache.turbine.util.RunData data)

This session validator does not require a new session for each request

Overrides:

requiresNewSession in class TemplateSessionValidator

Parameters:

data -

Returns: