|
|
Tomcat example source code file (fs-memory-realm.xml)
This example Tomcat source code file (fs-memory-realm.xml) is included in the DevDaily.com
"Java Source Code
Warehouse" project. The intent of this project is to help you "Learn Java by Example" TM.
The Tomcat fs-memory-realm.xml source code
<?xml version="1.0"?>
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
contributor license agreements. See the NOTICE file distributed with
this work for additional information regarding copyright ownership.
The ASF licenses this file to You under the Apache License, Version 2.0
(the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
-->
<!DOCTYPE document [
<!ENTITY project SYSTEM "project.xml">
]>
<document url="fs-memory-realm.html">
&project;
<properties>
<author email="craigmcc@apache.org">Craig McClanahan
<title>MemoryRealm
<revision>$Id: fs-memory-realm.xml 562814 2007-08-05 03:52:04Z markt $
</properties>
<body>
<section name="Overview">
<subsection name="Introduction">
<p>The purpose of the MemoryRealm implementation is to
provide a mechanism by which Tomcat 5 can acquire information needed
to authenticate web application users, and define their security roles,
from a simple text-based configuration file in XML format. This is
intended to simplify the initial installation and operation of Tomcat 5,
without the complexity of configuring a database or directory server
based Realm. It is not intended for production use.</p>
<p>This specification reflects a combination of functionality that is
already present in the <code>org.apache.catalina.realm.MemoryRealm
class, as well as requirements for enhancements that have been
discussed. Where appropriate, requirements statements are marked
<em>[Current] and [Requested] to distinguish them.
<p>The current status of this functional specification is
<strong>PROPOSED. It has not yet been discussed and
agreed to on the TOMCAT-DEV mailing list.</p>
</subsection>
<subsection name="External Specifications">
<p>The implementation of this functionality depends on the following
external specifications:</p>
<ul>
<li>None
</ul>
</subsection>
<subsection name="Implementation Requirements">
<p>The implementation of this functionality shall conform to the
following requirements:</p>
<ul>
<li>Be realized in one or more implementation classes.
<li>Implement the org.apache.catalina.Realm interface.
[Current]</li>
<li>Implement the org.apache.catalina.Lifecycle
interface. [Current]</li>
<li>Subclass the org.apache.catalina.realm.RealmBase
base class.</li>
<li>Live in the org.apache.catalina.realm package.
[Current]</li>
<li>Support a configurable debugging detail level. [Current]
<li>Log debugging and operational messages (suitably internationalized)
via the <code>getContainer().log() method. [Current]
</ul>
</subsection>
</section>
<section name="Dependencies">
<subsection name="Environmental Dependencies">
<p>The following environmental dependencies must be met in order for
MemoryRealm to operate correctly:</p>
<ul>
<li>The desire to utilize MemoryRealm must be registered in
<code>$CATALINA_HOME/conf/server.xml, in a
<code><Realm> element that is nested inside a
corresponding <code><Engine>, <Host>,
or <code><Context> element. (This is already
included in the default <code>server.xml file.)
</ul>
</subsection>
<subsection name="Container Dependencies">
<p>Correct operation of MemoryRealm depends on the following
specific features of the surrounding container:</p>
<ul>
<li>Interactions with MemoryRealm will be initiated by
the appropriate <code>Authenticator implementation, based
on the login method that is selected.</li>
<li>MemoryRealm must have an XML parser compatible with
the JAXP/1.1 APIs available to it. This is normally accomplished
by placing the corresponding JAR files in directory
<code>$CATALINA_HOME/server/lib (to make them visible only
to internal Catalina classes) or in directory
<code>$CATALINA_HOME/common/lib (to make them visible to
Catalina internal classes <strong>and installed web
applications).</li>
</ul>
</subsection>
</section>
<section name="Functionality">
<subsection name="Overview of Operation">
<p>The main purpose of MemoryRealm is to allow Catalina to
authenticate users, and look up the corresponding security roles, from
the information found in an XML-format configuration file. The format
of this file is described below. When a <code>MemoryRealm
instance is started, it will read the contents of this XML file and create
an "in memory database" of all the valid users and their associated
security roles.</p>
<p>Each time that Catalina needs to authenticate a user, it will call
the <code>authenticate() method of this Realm implementation,
passing the username and password that were specified by the user. If
we find the user in the database (and match on the password), we accumulate
all of the security roles that are defined for this user, and create a
new <code>GenericPrincipal object to be returned. If the user
is not authenticated, we return <code>null instead. The
<code>GenericUser object caches the set of security roles that
were owned by this user at the time of authentication, so that calls to
<code>isUserInRole() can be answered without going back to the
database every time.</p>
</subsection>
<subsection name="Detailed Functional Requirements">
<h3>Configurable Properties
<p>The implementation shall support the following properties
that can be configured with JavaBeans property setters:</p>
<ul>
<li>Configurable debugging detail level.
<li>Configurable file pathname (absolute or relative to
<code>$CATALINA_HOME of the XML file containing our
defined users. [<code>conf/tomcat-users.xml].
</ul>
<h3>Lifecycle Functionality
<p>The following processing must be performed when the start()
method is called:</p>
<ul>
<li>Open and parse the specified XML file.
<li>Create an in-memory database representation of the XML file
contents.</li>
<li>NOTE - There is no requirement to recognize
subsequent changes to the contents of the XML file.</li>
</ul>
<p>The following processing must be performed when the stop()
method is called:</p>
<ul>
<li>Release object references to the in-memory database representation.
</ul>
<h3>Method authenticate() Functionality
<p>When authenticate() is called, the following processing
is required:</p>
<ul>
<li>Select the one and only "user" instance from the in-memory database,
based on matching the specified username. If there is no such
instance, return <code>null.
<li>Authenticate the user by comparing the (possibly encrypted) password
value that was received against the password presented by the user.
If there is no match, return <code>null.
<li>Construct a new instance of class
<code>org.apache.catalina.realm.GenericPrincipal (if not
already using this as the internal database representation) that
contains the authenticated username and a <code>List of the
security roles associated with this user.</li>
<li>Return the newly constructed GenericPrincipal.
</ul>
<h3>Method hasRole() Functionality
<p>When hasRole() is called, the following processing
is required:</p>
<ul>
<li>The principal that is passed as an argument SHOULD
be one that we returned (instanceof class
<code>org.apache.catalina.realm.GenericPrincipal, with a
<code>realm property that is equal to our instance.
<li>If the passed principal meets these criteria, check
the specified role against the list returned by
<code>getRoles(), and return true if the
specified role is included; otherwise, return <code>false.
<li>If the passed principal does not meet these criteria,
return <code>false.
</ul>
</subsection>
</section>
<section name="Testable Assertions">
<p>In addition the the assertions implied by the functionality requirements
listed above, the following additional assertions shall be tested to
validate the behavior of <code>MemoryRealm:
<ul>
</ul>
</section>
</body>
</document>
Other Tomcat examples (source code examples)
Here is a short list of links related to this Tomcat fs-memory-realm.xml source code file:
|
The search page
Other Tomcat source code examples at this package level
Click here to learn more about this project
