import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * Abort the authentication (second phase).
 *
 * <p> This method is called if the LoginContext's
 * overall authentication failed.
 * (the relevant REQUIRED, REQUISITE, SUFFICIENT and OPTIONAL LoginModules
 * did not succeed).
 *
 * <p> This method cleans up any state that was originally saved
 * as part of the authentication attempt from the <code>login</code>
 * and <code>commit</code> methods.
 *
 * <p>
 *
 * @exception LoginException if the abort fails
 *
 * @return false if this LoginModule's own login and/or commit attempts
 *          failed, and true otherwise.
 */
public boolean abort() throws LoginException {
    if (debug) {
        System.out.println("\t\t[UnixLoginModule]: " +
            "aborted authentication attempt");
    }

    if (succeeded == false) {
        return false;
    } else if (succeeded == true && commitSucceeded == false) {

        // Clean out state
        succeeded = false;
        ss = null;
        userPrincipal = null;
        UIDPrincipal = null;
        GIDPrincipal = null;
        supplementaryGroups = new LinkedList<UnixNumericGroupPrincipal>();
    } else {
        // overall authentication succeeded and commit succeeded,
        // but someone else's commit failed
        logout();
    }
    return true;
}
 

import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * <p> This method is called if the LoginContext's
 * overall authentication failed.
 * (the relevant REQUIRED, REQUISITE, SUFFICIENT and OPTIONAL LoginModules
 * did not succeed).
 *
 * <p> If this LoginModule's own authentication attempt
 * succeeded (checked by retrieving the private state saved by the
 * <code>login</code> and <code>commit</code> methods),
 * then this method cleans up any state that was originally saved.
 *
 * <p>
 *
 * @exception LoginException if the abort fails.
 *
 * @return false if this LoginModule's own login and/or commit attempts
 *          failed, and true otherwise.
 */
public boolean abort() throws LoginException {
    if (debug)
        System.out.println("\t\t[JndiLoginModule]: " +
            "aborted authentication failed");

    if (succeeded == false) {
        return false;
    } else if (succeeded == true && commitSucceeded == false) {

        // Clean out state
        succeeded = false;
        cleanState();

        userPrincipal = null;
        UIDPrincipal = null;
        GIDPrincipal = null;
        supplementaryGroups = new LinkedList<UnixNumericGroupPrincipal>();
    } else {
        // overall authentication succeeded and commit succeeded,
        // but someone else's commit failed
        logout();
    }
    return true;
}
 

import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * Abort the authentication (second phase).
 *
 * <p> This method is called if the LoginContext's
 * overall authentication failed.
 * (the relevant REQUIRED, REQUISITE, SUFFICIENT and OPTIONAL LoginModules
 * did not succeed).
 *
 * <p> This method cleans up any state that was originally saved
 * as part of the authentication attempt from the {@code login}
 * and {@code commit} methods.
 *
 * @exception LoginException if the abort fails
 *
 * @return false if this LoginModule's own login and/or commit attempts
 *          failed, and true otherwise.
 */
public boolean abort() throws LoginException {
    if (debug) {
        System.out.println("\t\t[UnixLoginModule]: " +
            "aborted authentication attempt");
    }

    if (succeeded == false) {
        return false;
    } else if (succeeded == true && commitSucceeded == false) {

        // Clean out state
        succeeded = false;
        ss = null;
        userPrincipal = null;
        UIDPrincipal = null;
        GIDPrincipal = null;
        supplementaryGroups = new LinkedList<UnixNumericGroupPrincipal>();
    } else {
        // overall authentication succeeded and commit succeeded,
        // but someone else's commit failed
        logout();
    }
    return true;
}
 

import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * This method is called if the LoginContext's
 * overall authentication failed.
 * (the relevant REQUIRED, REQUISITE, SUFFICIENT and OPTIONAL LoginModules
 * did not succeed).
 *
 * <p> If this LoginModule's own authentication attempt
 * succeeded (checked by retrieving the private state saved by the
 * {@code login} and {@code commit} methods),
 * then this method cleans up any state that was originally saved.
 *
 * @exception LoginException if the abort fails.
 *
 * @return false if this LoginModule's own login and/or commit attempts
 *          failed, and true otherwise.
 */
public boolean abort() throws LoginException {
    if (debug)
        System.out.println("\t\t[JndiLoginModule]: " +
            "aborted authentication failed");

    if (succeeded == false) {
        return false;
    } else if (succeeded == true && commitSucceeded == false) {

        // Clean out state
        succeeded = false;
        cleanState();

        userPrincipal = null;
        UIDPrincipal = null;
        GIDPrincipal = null;
        supplementaryGroups = new LinkedList<UnixNumericGroupPrincipal>();
    } else {
        // overall authentication succeeded and commit succeeded,
        // but someone else's commit failed
        logout();
    }
    return true;
}
 

import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * Authenticate the user (first phase).
 *
 * <p> The implementation of this method attempts to retrieve the user's
 * Unix <code>Subject</code> information by making a native Unix
 * system call.
 *
 * <p>
 *
 * @exception FailedLoginException if attempts to retrieve the underlying
 *          system information fail.
 *
 * @return true in all cases (this <code>LoginModule</code>
 *          should not be ignored).
 */
public boolean login() throws LoginException {

    long[] unixGroups = null;

    ss = new UnixSystem();

    if (ss == null) {
        succeeded = false;
        throw new FailedLoginException
                            ("Failed in attempt to import " +
                            "the underlying system identity information");
    } else {
        userPrincipal = new UnixPrincipal(ss.getUsername());
        UIDPrincipal = new UnixNumericUserPrincipal(ss.getUid());
        GIDPrincipal = new UnixNumericGroupPrincipal(ss.getGid(), true);
        if (ss.getGroups() != null && ss.getGroups().length > 0) {
            unixGroups = ss.getGroups();
            for (int i = 0; i < unixGroups.length; i++) {
                UnixNumericGroupPrincipal ngp =
                    new UnixNumericGroupPrincipal
                    (unixGroups[i], false);
                if (!ngp.getName().equals(GIDPrincipal.getName()))
                    supplementaryGroups.add(ngp);
            }
        }
        if (debug) {
            System.out.println("\t\t[UnixLoginModule]: " +
                    "succeeded importing info: ");
            System.out.println("\t\t\tuid = " + ss.getUid());
            System.out.println("\t\t\tgid = " + ss.getGid());
            unixGroups = ss.getGroups();
            for (int i = 0; i < unixGroups.length; i++) {
                System.out.println("\t\t\tsupp gid = " + unixGroups[i]);
            }
        }
        succeeded = true;
        return true;
    }
}
 

import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * Logout the user
 *
 * <p> This method removes the Principals associated
 * with the <code>Subject</code>.
 *
 * <p>
 *
 * @exception LoginException if the logout fails
 *
 * @return true in all cases (this <code>LoginModule</code>
 *          should not be ignored).
 */
public boolean logout() throws LoginException {

    if (subject.isReadOnly()) {
            throw new LoginException
                ("logout Failed: Subject is Readonly");
        }
    // remove the added Principals from the Subject
    subject.getPrincipals().remove(userPrincipal);
    subject.getPrincipals().remove(UIDPrincipal);
    subject.getPrincipals().remove(GIDPrincipal);
    for (int i = 0; i < supplementaryGroups.size(); i++) {
        subject.getPrincipals().remove(supplementaryGroups.get(i));
    }

    // clean out state
    ss = null;
    succeeded = false;
    commitSucceeded = false;
    userPrincipal = null;
    UIDPrincipal = null;
    GIDPrincipal = null;
    supplementaryGroups = new LinkedList<UnixNumericGroupPrincipal>();

    if (debug) {
        System.out.println("\t\t[UnixLoginModule]: " +
            "logged out Subject");
    }
    return true;
}
 

import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * Logout a user.
 *
 * <p> This method removes the Principals
 * that were added by the <code>commit</code> method.
 *
 * <p>
 *
 * @exception LoginException if the logout fails.
 *
 * @return true in all cases since this <code>LoginModule</code>
 *          should not be ignored.
 */
public boolean logout() throws LoginException {
    if (subject.isReadOnly()) {
        cleanState();
        throw new LoginException ("Subject is Readonly");
    }
    subject.getPrincipals().remove(userPrincipal);
    subject.getPrincipals().remove(UIDPrincipal);
    subject.getPrincipals().remove(GIDPrincipal);
    for (int i = 0; i < supplementaryGroups.size(); i++) {
        subject.getPrincipals().remove(supplementaryGroups.get(i));
    }


    // clean out state
    cleanState();
    succeeded = false;
    commitSucceeded = false;

    userPrincipal = null;
    UIDPrincipal = null;
    GIDPrincipal = null;
    supplementaryGroups = new LinkedList<UnixNumericGroupPrincipal>();

    if (debug) {
        System.out.println("\t\t[JndiLoginModule]: " +
            "logged out Subject");
    }
    return true;
}
 

import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * Authenticate the user (first phase).
 *
 * <p> The implementation of this method attempts to retrieve the user's
 * Unix {@code Subject} information by making a native Unix
 * system call.
 *
 * @exception FailedLoginException if attempts to retrieve the underlying
 *          system information fail.
 *
 * @return true in all cases (this {@code LoginModule}
 *          should not be ignored).
 */
public boolean login() throws LoginException {

    long[] unixGroups = null;

    try {
        ss = new UnixSystem();
    } catch (UnsatisfiedLinkError ule) {
        succeeded = false;
        throw new FailedLoginException
                            ("Failed in attempt to import " +
                            "the underlying system identity information" +
                            " on " + System.getProperty("os.name"));
    }
    userPrincipal = new UnixPrincipal(ss.getUsername());
    UIDPrincipal = new UnixNumericUserPrincipal(ss.getUid());
    GIDPrincipal = new UnixNumericGroupPrincipal(ss.getGid(), true);
    if (ss.getGroups() != null && ss.getGroups().length > 0) {
        unixGroups = ss.getGroups();
        for (int i = 0; i < unixGroups.length; i++) {
            UnixNumericGroupPrincipal ngp =
                new UnixNumericGroupPrincipal
                (unixGroups[i], false);
            if (!ngp.getName().equals(GIDPrincipal.getName()))
                supplementaryGroups.add(ngp);
        }
    }
    if (debug) {
        System.out.println("\t\t[UnixLoginModule]: " +
                "succeeded importing info: ");
        System.out.println("\t\t\tuid = " + ss.getUid());
        System.out.println("\t\t\tgid = " + ss.getGid());
        unixGroups = ss.getGroups();
        for (int i = 0; i < unixGroups.length; i++) {
            System.out.println("\t\t\tsupp gid = " + unixGroups[i]);
        }
    }
    succeeded = true;
    return true;
}
 

import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * Logout the user
 *
 * <p> This method removes the Principals associated
 * with the {@code Subject}.
 *
 * @exception LoginException if the logout fails
 *
 * @return true in all cases (this {@code LoginModule}
 *          should not be ignored).
 */
public boolean logout() throws LoginException {

    if (subject.isReadOnly()) {
            throw new LoginException
                ("logout Failed: Subject is Readonly");
        }
    // remove the added Principals from the Subject
    subject.getPrincipals().remove(userPrincipal);
    subject.getPrincipals().remove(UIDPrincipal);
    subject.getPrincipals().remove(GIDPrincipal);
    for (int i = 0; i < supplementaryGroups.size(); i++) {
        subject.getPrincipals().remove(supplementaryGroups.get(i));
    }

    // clean out state
    ss = null;
    succeeded = false;
    commitSucceeded = false;
    userPrincipal = null;
    UIDPrincipal = null;
    GIDPrincipal = null;
    supplementaryGroups = new LinkedList<UnixNumericGroupPrincipal>();

    if (debug) {
        System.out.println("\t\t[UnixLoginModule]: " +
            "logged out Subject");
    }
    return true;
}
 

import com.sun.security.auth.UnixNumericGroupPrincipal; //导入依赖的package包/类
/**
 * Logout a user.
 *
 * <p> This method removes the Principals
 * that were added by the {@code commit} method.
 *
 * @exception LoginException if the logout fails.
 *
 * @return true in all cases since this {@code LoginModule}
 *          should not be ignored.
 */
public boolean logout() throws LoginException {
    if (subject.isReadOnly()) {
        cleanState();
        throw new LoginException ("Subject is Readonly");
    }
    subject.getPrincipals().remove(userPrincipal);
    subject.getPrincipals().remove(UIDPrincipal);
    subject.getPrincipals().remove(GIDPrincipal);
    for (int i = 0; i < supplementaryGroups.size(); i++) {
        subject.getPrincipals().remove(supplementaryGroups.get(i));
    }


    // clean out state
    cleanState();
    succeeded = false;
    commitSucceeded = false;

    userPrincipal = null;
    UIDPrincipal = null;
    GIDPrincipal = null;
    supplementaryGroups = new LinkedList<UnixNumericGroupPrincipal>();

    if (debug) {
        System.out.println("\t\t[JndiLoginModule]: " +
            "logged out Subject");
    }
    return true;
}