Package org.ovirt.engine.api.extensions.aaa

Class Authn.InvokeCommands

java.lang.Object

org.ovirt.engine.api.extensions.aaa.Authn.InvokeCommands

Enclosing class:

Authn

public static class Authn.InvokeCommands
extends Object

Invoke commands.

Field Summary

Fields

Modifier and Type	Field	Description
static final ExtUUID	AUTHENTICATE_CREDENTIALS	Credentials based authentication.
static final ExtUUID	AUTHENTICATE_NEGOTIATE	Negotiate authentication.
static final ExtUUID	CREDENTIALS_CHANGE	Credentials change.
static final ExtUUID	CREDENTIALS_SELF_RESET	Credentials self reset.
static final ExtUUID	LOGOUT	Logout.

Constructor Summary

Constructors

Constructor	Description
InvokeCommands()

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

AUTHENTICATE_NEGOTIATE

public static final ExtUUID AUTHENTICATE_NEGOTIATE

Negotiate authentication. Inspect HttpServletRequest and optionally interact with remote using HttpServletResponse. Authn.InvokeKeys.RESULT must be set with negotiation result. Authn.ContextKeys.HTTP_AUTHENTICATION_SCHEME value is sent when HTTP 401 response is sent, to enable client negotiation.

Input:

• Authn.InvokeKeys.HTTP_SERVLET_REQUEST[M]
• Authn.InvokeKeys.HTTP_SERVLET_RESPONSE[M]

Output:

• Authn.InvokeKeys.AUTH_RECORD[O] - must be set on success.
• Authn.InvokeKeys.CREDENTIALS_CHANGE_URL[O]
• Authn.InvokeKeys.PRINCIPAL[O] - should be set if available even if login failed if principal is known.
• Authn.InvokeKeys.RESULT[M]
• Authn.InvokeKeys.USER_MESSAGE[O]

See Also:

• Authn.AuthResult.NEGOTIATION_INCOMPLETE
• Authn.AuthResult.NEGOTIATION_UNAUTHORIZED

AUTHENTICATE_CREDENTIALS

public static final ExtUUID AUTHENTICATE_CREDENTIALS

Credentials based authentication.

Input:

• Authn.InvokeKeys.CREDENTIALS_CHALLENGE_RESPONSE_RECORD[O]
• Authn.InvokeKeys.CREDENTIALS[M]
• Authn.InvokeKeys.USER[M]

Output:

• Authn.InvokeKeys.AUTH_RECORD[O] - must be set on success.
• Authn.InvokeKeys.CREDENTIALS_CHALLENGE_RECORD[O]
• Authn.InvokeKeys.CREDENTIALS_CHANGE_URL[O]
• Authn.InvokeKeys.PRINCIPAL[O] - should be set if available even if login failed if principal is known.
• Authn.InvokeKeys.RESULT[M]
• Authn.InvokeKeys.USER_MESSAGE[O]

LOGOUT

public static final ExtUUID LOGOUT

Logout.

Input:

• Authn.InvokeKeys.AUTH_RECORD[M]

CREDENTIALS_CHANGE

public static final ExtUUID CREDENTIALS_CHANGE

Credentials change.

Input:

• Authn.InvokeKeys.CREDENTIALS_CHALLENGE_RESPONSE_RECORD[O]
• Authn.InvokeKeys.CREDENTIALS_NEW[M]
• Authn.InvokeKeys.CREDENTIALS[M]
• Authn.InvokeKeys.USER or Authn.InvokeKeys.PRINCIPAL[M]

Output:

• Authn.InvokeKeys.RESULT[M]
• Authn.InvokeKeys.CREDENTIALS_CHALLENGE_RECORD[O]

CREDENTIALS_SELF_RESET

public static final ExtUUID CREDENTIALS_SELF_RESET

Credentials self reset.

Input:

• Authn.InvokeKeys.USER or Authn.InvokeKeys.PRINCIPAL[M]
• Authn.InvokeKeys.CREDENTIALS_CHALLENGE_RESPONSE_RECORD[O]

Output:

• Authn.InvokeKeys.CREDENTIALS_CHALLENGE_RECORD[O]

Constructor Details

InvokeCommands

public InvokeCommands()