svn commit: r1855336 - in /uima/uima-ducc/trunk: src/main/resources/default.ducc.properties uima-ducc-web/src/main/java/org/apache/uima/ducc/ws/authentication/GSAAuthenticator.java

[de...@apache.org]

Author: degenaro
Date: Tue Mar 12 15:25:42 2019
New Revision: 1855336

URL: http://svn.apache.org/viewvc?rev=1855336&view=rev
Log:
UIMA-5998 DUCC Web Server (WS) authentication plugin for GSA

Added:
    uima/uima-ducc/trunk/uima-ducc-web/src/main/java/org/apache/uima/ducc/ws/authentication/GSAAuthenticator.java   (with props)
Modified:
    uima/uima-ducc/trunk/src/main/resources/default.ducc.properties

Modified: uima/uima-ducc/trunk/src/main/resources/default.ducc.properties
URL: http://svn.apache.org/viewvc/uima/uima-ducc/trunk/src/main/resources/default.ducc.properties?rev=1855336&r1=1855335&r2=1855336&view=diff
==============================================================================
--- uima/uima-ducc/trunk/src/main/resources/default.ducc.properties (original)
+++ uima/uima-ducc/trunk/src/main/resources/default.ducc.properties Tue Mar 12 15:25:42 2019
@@ -151,6 +151,7 @@ ducc.broker.server.url.decoration = tran
 # If unconfigured, the Web Server enforces no authentication.
 #ducc.authentication.implementer=org.apache.uima.ducc.ws.authentication.LinuxAuthenticationManager
 #ducc.authentication.implementer=org.apache.uima.ducc.ws.authentication.SecureFileAuthenticator
+#ducc.authentication.implementer=org.apache.uima.ducc.ws.authentication.GSAAuthenticator
 
 # Specify users allowed to log in to the web server.
 #ducc.authentication.users.include = user1 user2

Added: uima/uima-ducc/trunk/uima-ducc-web/src/main/java/org/apache/uima/ducc/ws/authentication/GSAAuthenticator.java
URL: http://svn.apache.org/viewvc/uima/uima-ducc/trunk/uima-ducc-web/src/main/java/org/apache/uima/ducc/ws/authentication/GSAAuthenticator.java?rev=1855336&view=auto
==============================================================================
--- uima/uima-ducc/trunk/uima-ducc-web/src/main/java/org/apache/uima/ducc/ws/authentication/GSAAuthenticator.java (added)
+++ uima/uima-ducc/trunk/uima-ducc-web/src/main/java/org/apache/uima/ducc/ws/authentication/GSAAuthenticator.java Tue Mar 12 15:25:42 2019
@@ -0,0 +1,118 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ * 
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ * 
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+*/
+package org.apache.uima.ducc.ws.authentication;
+
+import java.io.BufferedReader;
+import java.io.BufferedWriter;
+import java.io.InputStreamReader;
+import java.io.OutputStreamWriter;
+
+import org.apache.uima.ducc.common.authentication.AuthenticationResult;
+import org.apache.uima.ducc.common.authentication.IAuthenticationResult;
+import org.apache.uima.ducc.common.utils.DuccLogger;
+import org.apache.uima.ducc.common.utils.DuccPropertiesResolver;
+import org.apache.uima.ducc.common.utils.id.DuccId;
+
+public class GSAAuthenticator extends AbstractAuthenticator {
+
+	private static DuccLogger duccLogger = DuccLogger.getLogger(GSAAuthenticator.class);
+	private static DuccId jobid = null;
+	
+	private String version = "GSA 1.0";
+	
+	@Override
+	public String getVersion() {
+		return version;
+	}
+
+	@Override
+	public String getNotes(String userid) {
+		String retVal = "Specify your GSA login password.";
+		return retVal;
+	}
+	
+	@Override
+	public boolean isPasswordChecked() {
+		return true;
+	}
+
+	private String get_ducc_ling() throws Exception {
+		DuccPropertiesResolver dpr = DuccPropertiesResolver.getInstance();
+		String key = "ducc.agent.launcher.ducc_spawn_path";
+		String value = dpr.getFileProperty(key);
+		if(value == null) {
+			throw new Exception("missing ducc_ling in ducc.properties?");
+		}
+		return value;
+	}
+	
+	private String gsa_login = "/usr/bin/gsa_login";
+	private String gsa_arg1 = "-p";
+	private String gsa_response_prefix = "Successfully authenticated";
+	
+	private int login(String user, String pw) throws Exception {
+		String location = "login";
+		int rc_success = 0;
+		int rc_fail = 1;
+		int rc = rc_fail;
+		String ducc_ling = get_ducc_ling();
+		ProcessBuilder builder = new ProcessBuilder(ducc_ling,"-u",user,"--",gsa_login,gsa_arg1);
+		builder.redirectErrorStream(true);
+		Process p = builder.start();
+		BufferedWriter w = new BufferedWriter(new OutputStreamWriter(p.getOutputStream()));
+		w.write(pw);
+		w.flush();
+		w.close();
+		BufferedReader r = new BufferedReader(new InputStreamReader(p.getInputStream()));
+		String line;
+		while (true) {
+			line = r.readLine();
+			if (line == null) {
+				break;
+			}
+			duccLogger.debug(location, jobid, line);
+			if (line.startsWith(gsa_response_prefix)) {
+				rc = rc_success;
+				break;
+			}
+		}
+		r.close();
+		return rc;
+	}
+	
+	@Override
+	public IAuthenticationResult isAuthenticate(String userid, String domain, String password) {
+		String location = "isAuthenticate";
+		IAuthenticationResult ar = new AuthenticationResult();
+		ar.setFailure();
+		try {
+			int rc = login(userid,password);
+			if(rc == 0) {
+				ar.setSuccess();
+			}
+			duccLogger.info(location, jobid, "failure:"+ar.isFailure()+" "+"success:"+ar.isSuccess());
+		}
+		catch(Exception e) {
+			duccLogger.warn(location, jobid, e);
+		}
+		duccLogger.info(location, jobid, "failure:"+ar.isFailure()+" "+"success:"+ar.isSuccess());
+		return ar;
+	}
+
+}

Propchange: uima/uima-ducc/trunk/uima-ducc-web/src/main/java/org/apache/uima/ducc/ws/authentication/GSAAuthenticator.java
------------------------------------------------------------------------------
    svn:mime-type = text/plain