灵石之迹

import java.rmi.RemoteException;
import java.security.cert.X509Certificate;
import java.util.*;
import java.util.List;
import java.util.Properties;

import com.ibm.websphere.security.CertificateMapFailedException;
import com.ibm.websphere.security.CertificateMapNotSupportedException;
import com.ibm.websphere.security.CustomRegistryException;
import com.ibm.websphere.security.EntryNotFoundException;
import com.ibm.websphere.security.NotImplementedException;
import com.ibm.websphere.security.PasswordCheckFailedException;
import com.ibm.websphere.security.Result;
import com.ibm.websphere.security.UserRegistry;
import com.ibm.websphere.security.cred.WSCredential;

/*
 * 创建日期 2006-7-11
 *
 * TODO 要更改此生成的文件的模板，请转至
 * 窗口 － 首选项 － Java － 代码样式 － 代码模板
 */

/**
 * @author 灵石
 *
 * TODO 要更改此生成的类型注释的模板，请转至 窗口 － 首选项 － Java － 代码样式 － 代码模板
 */
public class LoginValidation implements UserRegistry {

 /** Default Constructor * */
 public LoginValidation() throws java.rmi.RemoteException {
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#initialize(java.util.Properties)
  */
 public void initialize(Properties arg0) throws CustomRegistryException,
   RemoteException {
  // TODO 自动生成方法存根
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#checkPassword(java.lang.String,
  *      java.lang.String)
  */
 public String checkPassword(String userSecurityName, String passwd)
   throws PasswordCheckFailedException, CustomRegistryException,
   RemoteException {
  // TODO 自动生成方法存根
  String userName = null;

  String sqlStr = "select * from loginer where login='"
    + userSecurityName + "' and password='" + passwd + "'";

  if (userSecurityName.equals("supadmin")) {
   sqlStr = "select * from supersysadmin where password='" + passwd
     + "'";
  }

  try {
   if (DbOperate.getsqlcount(sqlStr) >= 1) {
    userName = userSecurityName;
    System.out.println(" checkPassword succeed for "
      + userSecurityName);
   }
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  if (userName == null) {
   throw new PasswordCheckFailedException(
     "Password check failed for user: " + userSecurityName);
  }

  return userName;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#mapCertificate(java.security.cert.X509Certificate[])
  */
 public String mapCertificate(X509Certificate[] cert)
   throws CertificateMapNotSupportedException,
   CertificateMapFailedException, CustomRegistryException,
   RemoteException {
  //TODO 自动生成方法存根
  String name = null;
  X509Certificate cert1 = cert[0];
  try {
   // map the SubjectDN in the certificate to a userID.
   name = cert1.getSubjectDN().getName();
  } catch (Exception ex) {
   throw new CertificateMapNotSupportedException(ex.getMessage(), ex);
  }

  if (!isValidUser(name)) {
   throw new CertificateMapFailedException("user: " + name
     + " is not valid");
  }
  return name;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getRealm()
  */
 public String getRealm() throws CustomRegistryException, RemoteException {
  // TODO 自动生成方法存根
  String name = "customRealm";
  return name;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getUsers(java.lang.String,
  *      int)
  */
 public Result getUsers(String pattern, int limit)
   throws CustomRegistryException, RemoteException {
  // TODO 自动生成方法存根
  List allUsers = new ArrayList();
  Result result = new Result();

  try {
   if (match("supadmin", pattern) && limit > 0) {
    allUsers.add("supadmin");
    limit--;
   }
   List list = DbOperate
     .executeQuery("select LOGIN from LOGINER order by LOGIN");
   int i = 0;
   for (i = 0; i < list.size() && limit > 0; i++) {
    Map map = (Map) list.get(i);
    if (match(map.get("LOGIN").toString(), pattern)) {
     allUsers.add(map.get("LOGIN"));
     limit--;
    }
   }
   System.out.println(i);
   if (i < list.size())
    result.setHasMore();
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  result.setList(allUsers);
  return result;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getUserDisplayName(java.lang.String)
  */
 public String getUserDisplayName(String userSecurityName)
   throws EntryNotFoundException, CustomRegistryException,
   RemoteException {
  // TODO 自动生成方法存根
  String displayName = null;

  if (!isValidUser(userSecurityName)) {
   EntryNotFoundException nsee = new EntryNotFoundException("user: "
     + userSecurityName + " is not valid");
   throw nsee;
  }

  try {
   displayName = userSecurityName;
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  return displayName;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getUniqueUserId(java.lang.String)
  */
 public String getUniqueUserId(String userSecurityName)
   throws EntryNotFoundException, CustomRegistryException,
   RemoteException {
  // TODO 自动生成方法存根
  String uniqueUsrId = null;
  try {
   if (isValidUser(userSecurityName)) {
    uniqueUsrId = userSecurityName;
   }

  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  if (uniqueUsrId == null) {
   EntryNotFoundException nsee = new EntryNotFoundException(
     "Cannot obtain uniqueId for user: " + userSecurityName);
   throw nsee;
  }
  return uniqueUsrId;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getUserSecurityName(java.lang.String)
  */
 public String getUserSecurityName(String userSecurityName)
   throws EntryNotFoundException, CustomRegistryException,
   RemoteException {
  // TODO 自动生成方法存根
  String usrSecName = null;
  try {
   if (isValidUser(userSecurityName)) {
    usrSecName = userSecurityName;
   }

  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  if (usrSecName == null) {
   EntryNotFoundException nsee = new EntryNotFoundException(
     "Cannot obtain uniqueId for user: " + userSecurityName);
   throw nsee;
  }
  return usrSecName;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#isValidUser(java.lang.String)
  */
 public boolean isValidUser(String userSecurityName)
   throws CustomRegistryException, RemoteException {
  // TODO 自动生成方法存根
  boolean isValid = false;
  try {
   if (userSecurityName.equals("supadmin"))
    isValid = true;
   String sqlStr = "select * from loginer where login='"
     + userSecurityName + "'";
   if (DbOperate.getsqlcount(sqlStr) >= 1)
    isValid = true;
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  return isValid;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getGroups(java.lang.String,
  *      int)
  */
 public Result getGroups(String pattern, int limit)
   throws CustomRegistryException, RemoteException {
  // TODO 自动生成方法存根
  List allGroups = new ArrayList();
  Result result = new Result();
  int count = 0, i = 0;
  try {
   if (limit > count) {
    i++;
    if (match("SuperSysAdmin", pattern)) {
     allGroups.add("SuperSysAdmin");
     count++;
    }
   }

   if (limit > count) {
    i++;
    if (match("Admin", pattern)) {
     allGroups.add("Admin");
     count++;
    }
   }

   if (limit > count) {
    i++;
    if (match("InUser", pattern)) {
     allGroups.add("InUser");
     count++;
    }
   }

   if (limit > count) {
    i++;
    if (match("OutPermUser", pattern)) {
     allGroups.add("OutPermUser");
     count++;
    }
   }

   if (limit > count) {
    i++;
    if (match("OutNetUser", pattern)) {
     allGroups.add("OutNetUser");
     count++;
    }
   }

   List list = DbOperate
     .executeQuery("select GROUPKEY from GROUPS order by GROUPTYPE,GROUPKEY");
   int j = 0;
   for (j = 0; j < list.size() && limit > 0; j++) {
    Map map = (Map) list.get(j);
    if (match(map.get("GROUPKEY").toString(), pattern)) {
     allGroups.add(map.get("GROUPKEY"));
     limit--;
    }
   }

   if (i < 5)
    result.setHasMore();
   else {
    if (j < list.size())
     result.setHasMore();
   }

  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  result.setList(allGroups);
  return result;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getGroupDisplayName(java.lang.String)
  */
 public String getGroupDisplayName(String groupSecurityName)
   throws EntryNotFoundException, CustomRegistryException,
   RemoteException {
  // TODO 自动生成方法存根
  String displayName = null;

  if (!isValidGroup(groupSecurityName)) {
   EntryNotFoundException nsee = new EntryNotFoundException("group: "
     + groupSecurityName + " is not valid");
   throw nsee;
  }
  try {
   displayName = groupSecurityName;
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  return displayName;

 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getUniqueGroupId(java.lang.String)
  */
 public String getUniqueGroupId(String groupSecurityName)
   throws EntryNotFoundException, CustomRegistryException,
   RemoteException {
  // TODO 自动生成方法存根
  String uniqueGrpId = null;
  if (!isValidGroup(groupSecurityName))

   if (!isValidGroup(groupSecurityName)) {
    EntryNotFoundException nsee = new EntryNotFoundException(
      "group: " + groupSecurityName + " is not valid");
    throw nsee;
   }
  try {
   uniqueGrpId = groupSecurityName;
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  return uniqueGrpId;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getUniqueGroupIds(java.lang.String)
  */
 public List getUniqueGroupIds(String uniqueUserId)
   throws EntryNotFoundException, CustomRegistryException,
   RemoteException {
  // TODO 自动生成方法存根
  List uniqueGrpIds = new ArrayList();

  try {
   if (uniqueUserId.equals("supadmin"))
    uniqueGrpIds.add("SuperSysAdmin");
   else {
    List list = DbOperate
      .executeQuery("select LINKTABLE from LOGINER where LOGIN='"
        + uniqueUserId + "'");
    if (list.size() > 0) {
     Map map = (Map) list.get(0);
     uniqueGrpIds.add(map.get("LINKTABLE"));
    }

    List list2 = DbOperate
      .executeQuery("select GROUPKEY from USERSGROUPS where LOGIN='"
        + uniqueUserId + "'");
    for (int i = 0; i < list.size(); i++) {
     Map map = (Map) list.get(i);
     uniqueGrpIds.add(map.get("GROUPKEY"));
    }
   }
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  return uniqueGrpIds;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getGroupSecurityName(java.lang.String)
  */
 public String getGroupSecurityName(String uniqueGroupId)
   throws EntryNotFoundException, CustomRegistryException,
   RemoteException {
  String grpSecName = null;
  grpSecName = uniqueGroupId;
  // TODO 自动生成方法存根
  return grpSecName;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#isValidGroup(java.lang.String)
  */
 public boolean isValidGroup(String groupSecurityName)
   throws CustomRegistryException, RemoteException {
  // TODO 自动生成方法存根
  boolean isValid = false;
  try {
   if (groupSecurityName.equals("SuperSysAdmin"))
    isValid = true;
   else if (groupSecurityName.equals("Admin"))
    isValid = true;
   else if (groupSecurityName.equals("InUser"))
    isValid = true;
   else if (groupSecurityName.equals("OutPermUser"))
    isValid = true;
   else if (groupSecurityName.equals("OutNetUser"))
    isValid = true;
   else if (DbOperate
     .getsqlcount("select * from GROUPS where GROUPKEY='"
       + groupSecurityName + "'") >= 1)
    isValid = true;
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  return isValid;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getGroupsForUser(java.lang.String)
  */
 public List getGroupsForUser(String userName)
   throws EntryNotFoundException, CustomRegistryException,
   RemoteException {
  // TODO 自动生成方法存根
  List grpsForUser = new ArrayList();
  try {
   if (userName.equals("supadmin"))
    grpsForUser.add("SuperSysAdmin");
   else {
    List list = DbOperate
      .executeQuery("select LINKTABLE from LOGINER where LOGIN='"
        + userName + "'");
    if (list.size() > 0) {
     Map map = (Map) list.get(0);
     grpsForUser.add(map.get("LINKTABLE"));
    }

    List list2 = DbOperate
      .executeQuery("select GROUPKEY from USERSGROUPS where LOGIN='"
        + userName + "'");
    for (int i = 0; i < list.size(); i++) {
     Map map = (Map) list.get(i);
     grpsForUser.add(map.get("GROUPKEY"));
    }
   }
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  return grpsForUser;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#getUsersForGroup(java.lang.String,
  *      int)
  */
 public Result getUsersForGroup(String groupSecurityName, int limit)
   throws NotImplementedException, EntryNotFoundException,
   CustomRegistryException, RemoteException {
  // TODO 自动生成方法存根..................
  List usrsForGroup = new ArrayList();
  Result result = new Result();
  try {
   if (groupSecurityName.equals("SuperSysAdmin")) {
    if (limit > 0)
     usrsForGroup.add("supadmin");
   } else {
    String sqlStr = null;
    if (groupSecurityName.equals("Admin")
      || groupSecurityName.equals("InUser")
      || groupSecurityName.equals("OutNetUser")
      || groupSecurityName.equals("OutPermUser")) {
     sqlStr = "select LOGIN from LOGINER where LINKTABLE='"
       + groupSecurityName + "'";
    } else {
     sqlStr = "select LOGIN from USERSGROUPS where GROUPKEY='"
       + groupSecurityName + "'";
    }
    List list = DbOperate.executeQuery(sqlStr);
    int i = 0;
    for (i = 0; i < list.size() && limit > 0; i++) {
     Map map = (Map) list.get(i);
     usrsForGroup.add(map.get("LOGIN"));
     limit--;
    }
    System.out.println(i);
    if (i < list.size())
     result.setHasMore();
   }
  } catch (Exception ex) {
   throw new CustomRegistryException(ex.getMessage(), ex);
  } finally {
  }

  result.setList(usrsForGroup);
  return result;
 }

 /*
  * （非 Javadoc）
  *
  * @see com.ibm.websphere.security.UserRegistry#createCredential(java.lang.String)
  */
 public WSCredential createCredential(String userSecurityName)
   throws NotImplementedException, EntryNotFoundException,
   CustomRegistryException, RemoteException {
  // TODO 自动生成方法存根
  // This method is not called.
  return null;
 }

 private boolean match(String name, String pattern) {
  myRegExpSample regexp = new myRegExpSample(pattern);
  boolean matches = false;
  if (regexp.match(name))
   matches = true;
  return matches;
 }
}

class myRegExpSample {

 private boolean match(String s, int i, int j, int k) {
  for (; k < expr.length; k++)
   label0: {
    Object obj = expr[k];
    if (obj == STAR) {
     if (++k >= expr.length)
      return true;
     if (expr[k] instanceof String) {
      String s1 = (String) expr[k++];
      int l = s1.length();
      for (; (i = s.indexOf(s1, i)) >= 0; i++)
       if (match(s, i + l, j, k))
        return true;

      return false;
     }
     for (; i < j; i++)
      if (match(s, i, j, k))
       return true;

     return false;
    }
    if (obj == ANY) {
     if (++i > j)
      return false;
     break label0;
    }
    if (obj instanceof char[][]) {
     if (i >= j)
      return false;
     char c = s.charAt(i++);
     char ac[][] = (char[][]) obj;
     if (ac[0] == NOT) {
      for (int j1 = 1; j1 < ac.length; j1++)
       if (ac[j1][0] <= c && c <= ac[j1][1])
        return false;

      break label0;
     }
     for (int k1 = 0; k1 < ac.length; k1++)
      if (ac[k1][0] <= c && c <= ac[k1][1])
       break label0;

     return false;
    }
    if (obj instanceof String) {
     String s2 = (String) obj;
     int i1 = s2.length();
     if (!s.regionMatches(i, s2, 0, i1))
      return false;
     i += i1;
    }
   }

  return i == j;
 }

 public boolean match(String s) {
  return match(s, 0, s.length(), 0);
 }

 public boolean match(String s, int i, int j) {
  return match(s, i, j, 0);
 }

 public myRegExpSample(String s) {
  Vector vector = new Vector();
  int i = s.length();
  StringBuffer stringbuffer = null;
  Object obj = null;
  for (int j = 0; j < i; j++) {
   char c = s.charAt(j);
   switch (c) {
   case 63: /* '?' */
    obj = ANY;
    break;

   case 42: /* '*' */
    obj = STAR;
    break;

   case 91: /* '[' */
    int k = ++j;
    Vector vector1 = new Vector();
    for (; j < i; j++) {
     c = s.charAt(j);
     if (j == k && c == '^') {
      vector1.addElement(NOT);
      continue;
     }
     if (c == '\\') {
      if (j + 1 < i)
       c = s.charAt(++j);
     } else if (c == ']')
      break;
     char c1 = c;
     if (j + 2 < i && s.charAt(j + 1) == '-')
      c1 = s.charAt(j += 2);
     char ac1[] = { c, c1 };
     vector1.addElement(ac1);
    }

    char ac[][] = new char[vector1.size()][];
    vector1.copyInto(ac);
    obj = ac;
    break;

   case 92: /* '\\' */
    if (j + 1 < i)
     c = s.charAt(++j);
    break;

   }
   if (obj != null) {
    if (stringbuffer != null) {
     vector.addElement(stringbuffer.toString());
     stringbuffer = null;
    }
    vector.addElement(obj);
    obj = null;
   } else {
    if (stringbuffer == null)
     stringbuffer = new StringBuffer();
    stringbuffer.append(c);
   }
  }

  if (stringbuffer != null)
   vector.addElement(stringbuffer.toString());
  expr = new Object[vector.size()];
  vector.copyInto(expr);
 }

 static final char NOT[] = new char[2];

 static final Integer ANY = new Integer(0);

 static final Integer STAR = new Integer(1);

 Object expr[];

}