public static void main(String[] args) throws Exception { try { Sasl.createSaslClient( new String[] {"NTLM"}, "abc", "ldap", "server", new HashMap<String, Object>(), null); } catch (SaslException se) { System.out.println(se); } try { Sasl.createSaslServer("NTLM", "ldap", "server", new HashMap<String, Object>(), null); } catch (SaslException se) { System.out.println(se); } try { Sasl.createSaslClient( new String[] {"NTLM"}, "abc", "ldap", "server", null, new CallbackHandler() { @Override public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {} }); } catch (SaslException se) { System.out.println(se); } try { SaslServer saslServer = Sasl.createSaslServer( "NTLM", "ldap", "abc", null, new CallbackHandler() { @Override public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {} }); System.err.println("saslServer = " + saslServer); System.err.println("saslServer.isComplete() = " + saslServer.isComplete()); // IllegalStateException is expected here saslServer.getNegotiatedProperty("prop"); System.err.println("No IllegalStateException"); } catch (IllegalStateException se) { System.out.println(se); } try { SaslServer saslServer = Sasl.createSaslServer( "NTLM", "ldap", "abc", null, new CallbackHandler() { @Override public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {} }); System.err.println("saslServer = " + saslServer); System.err.println("saslServer.isComplete() = " + saslServer.isComplete()); // IllegalStateException is expected here saslServer.getAuthorizationID(); System.err.println("No IllegalStateException"); } catch (IllegalStateException se) { System.out.println(se); } try { SaslServer saslServer = Sasl.createSaslServer( "NTLM", "ldap", "abc", null, new CallbackHandler() { @Override public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {} }); System.err.println("saslServer = " + saslServer); System.err.println("saslServer.isComplete() = " + saslServer.isComplete()); // IllegalStateException is expected here saslServer.wrap(new byte[0], 0, 0); System.err.println("No IllegalStateException"); } catch (IllegalStateException se) { System.out.println(se); } }
public static void main(String[] args) throws Exception { if (args.length == 0) { namesfile = null; auto = true; } else { int i = 0; if (args[i].equals("-m")) { i++; auto = false; } if (args.length > i) { namesfile = args[i++]; if (args.length > i) { proxyfile = args[i]; } } else { namesfile = null; } } CallbackHandler clntCbh = null; final CallbackHandler srvCbh = new PropertiesFileCallbackHandler(null, namesfile, proxyfile); Subject clntSubj = doLogin("client"); Subject srvSubj = doLogin("server"); final HashMap clntprops = new HashMap(); final HashMap srvprops = new HashMap(); clntprops.put(Sasl.QOP, "auth"); srvprops.put(Sasl.QOP, "auth,auth-int,auth-conf"); final SaslClient clnt = (SaslClient) Subject.doAs( clntSubj, new PrivilegedExceptionAction() { public Object run() throws Exception { return Sasl.createSaslClient( new String[] {MECH}, null, PROTOCOL, SERVER_FQDN, clntprops, null); } }); if (verbose) { System.out.println(clntSubj); System.out.println(srvSubj); } final SaslServer srv = (SaslServer) Subject.doAs( srvSubj, new PrivilegedExceptionAction() { public Object run() throws Exception { return Sasl.createSaslServer(MECH, PROTOCOL, SERVER_FQDN, srvprops, srvCbh); } }); if (clnt == null) { throw new IllegalStateException("Unable to find client impl for " + MECH); } if (srv == null) { throw new IllegalStateException("Unable to find server impl for " + MECH); } byte[] response; byte[] challenge; response = (byte[]) Subject.doAs( clntSubj, new PrivilegedExceptionAction() { public Object run() throws Exception { return (clnt.hasInitialResponse() ? clnt.evaluateChallenge(EMPTY) : EMPTY); } }); while (!clnt.isComplete() || !srv.isComplete()) { final byte[] responseCopy = response; challenge = (byte[]) Subject.doAs( srvSubj, new PrivilegedExceptionAction() { public Object run() throws Exception { return srv.evaluateResponse(responseCopy); } }); if (challenge != null) { final byte[] challengeCopy = challenge; response = (byte[]) Subject.doAs( clntSubj, new PrivilegedExceptionAction() { public Object run() throws Exception { return clnt.evaluateChallenge(challengeCopy); } }); } } if (clnt.isComplete() && srv.isComplete()) { if (verbose) { System.out.println("SUCCESS"); System.out.println("authzid is " + srv.getAuthorizationID()); } } else { throw new IllegalStateException( "FAILURE: mismatched state:" + " client complete? " + clnt.isComplete() + " server complete? " + srv.isComplete()); } if (verbose) { System.out.println(clnt.getNegotiatedProperty(Sasl.QOP)); } // Now try to use security layer byte[] clntBuf = new byte[] {0, 1, 2, 3}; try { byte[] wrapped = clnt.wrap(clntBuf, 0, clntBuf.length); throw new Exception("clnt wrap should not be allowed w/no security layer"); } catch (IllegalStateException e) { // expected } byte[] srvBuf = new byte[] {10, 11, 12, 13}; try { byte[] wrapped = srv.wrap(srvBuf, 0, srvBuf.length); throw new Exception("srv wrap should not be allowed w/no security layer"); } catch (IllegalStateException e) { // expected } try { byte[] unwrapped = clnt.unwrap(clntBuf, 0, clntBuf.length); throw new Exception("clnt wrap should not be allowed w/no security layer"); } catch (IllegalStateException e) { // expected } try { byte[] unwrapped = srv.unwrap(srvBuf, 0, srvBuf.length); throw new Exception("srv wrap should not be allowed w/no security layer"); } catch (IllegalStateException e) { // expected } }