1/**
2 * $RCSfile$
3 * $Revision$
4 * $Date$
5 *
6 *
7 * All rights reserved. Licensed under the Apache License, Version 2.0 (the "License");
8 * you may not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 *     http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS,
15 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
18 */
19
20package org.jivesoftware.smack.sasl;
21
22import org.jivesoftware.smack.SASLAuthentication;
23import org.jivesoftware.smack.XMPPException;
24
25import java.io.IOException;
26import java.util.Map;
27import java.util.HashMap;
28import de.measite.smack.Sasl;
29import org.apache.harmony.javax.security.auth.callback.CallbackHandler;
30
31/**
32 * Implementation of the SASL GSSAPI mechanism
33 *
34 * @author Jay Kline
35 */
36public class SASLGSSAPIMechanism extends SASLMechanism {
37
38    public SASLGSSAPIMechanism(SASLAuthentication saslAuthentication) {
39        super(saslAuthentication);
40
41        System.setProperty("javax.security.auth.useSubjectCredsOnly","false");
42        System.setProperty("java.security.auth.login.config","gss.conf");
43
44    }
45
46    protected String getName() {
47        return "GSSAPI";
48    }
49
50    /**
51     * Builds and sends the <tt>auth</tt> stanza to the server.
52     * This overrides from the abstract class because the initial token
53     * needed for GSSAPI is binary, and not safe to put in a string, thus
54     * getAuthenticationText() cannot be used.
55     *
56     * @param username the username of the user being authenticated.
57     * @param host     the hostname where the user account resides.
58     * @param cbh      the CallbackHandler (not used with GSSAPI)
59     * @throws IOException If a network error occures while authenticating.
60     */
61    public void authenticate(String username, String host, CallbackHandler cbh) throws IOException, XMPPException {
62        String[] mechanisms = { getName() };
63        Map<String,String> props = new HashMap<String,String>();
64        props.put(Sasl.SERVER_AUTH,"TRUE");
65        sc = Sasl.createSaslClient(mechanisms, username, "xmpp", host, props, cbh);
66        authenticate();
67    }
68
69    /**
70     * Builds and sends the <tt>auth</tt> stanza to the server.
71     * This overrides from the abstract class because the initial token
72     * needed for GSSAPI is binary, and not safe to put in a string, thus
73     * getAuthenticationText() cannot be used.
74     *
75     * @param username the username of the user being authenticated.
76     * @param host     the hostname where the user account resides.
77     * @param password the password of the user (ignored for GSSAPI)
78     * @throws IOException If a network error occures while authenticating.
79     */
80    public void authenticate(String username, String host, String password) throws IOException, XMPPException {
81        String[] mechanisms = { getName() };
82        Map<String,String> props = new HashMap<String, String>();
83        props.put(Sasl.SERVER_AUTH,"TRUE");
84        sc = Sasl.createSaslClient(mechanisms, username, "xmpp", host, props, this);
85        authenticate();
86    }
87
88
89}
90