Refactored PKI JNDI realm.

The PKI JNDI realm has been modified to utilize the authentication
and authorization subsystems in PKI engine directly. It's no longer
necessary to define the LDAP connection settings in Tomcat's
configuration files.

Ticket #126

3 files changed, 22 insertions, 0 deletions

diff --git a/base/common/src/com/netscape/certsrv/authentication/AuthToken.java b/base/common/src/com/netscape/certsrv/authentication/AuthToken.java
index 1b5bf2350..827278711 100644
--- a/base/common/src/com/netscape/certsrv/authentication/AuthToken.java
+++ b/base/common/src/com/netscape/certsrv/authentication/AuthToken.java
@@ -112,6 +112,10 @@ public class AuthToken implements IAuthToken {
         set(TOKEN_AUTHTIME, new Date());
     }
 
+    public Object get(String attrName) {
+        return mAttrs.get(attrName);
+    }
+
     public String getInString(String attrName) {
         return (String) mAttrs.get(attrName);
     }
diff --git a/base/common/src/com/netscape/certsrv/authentication/IAuthToken.java b/base/common/src/com/netscape/certsrv/authentication/IAuthToken.java
index e469f3786..3c03cc1f5 100644
--- a/base/common/src/com/netscape/certsrv/authentication/IAuthToken.java
+++ b/base/common/src/com/netscape/certsrv/authentication/IAuthToken.java
@@ -55,6 +55,15 @@ public interface IAuthToken {
      * @exception EBaseException on attribute handling errors.
      * @return the attribute value
      */
+    public Object get(String name);
+
+    /**
+     * Gets an attribute value.
+     *
+     * @param name the name of the attribute to return.
+     * @exception EBaseException on attribute handling errors.
+     * @return the attribute value
+     */
     public String getInString(String name);
 
     /**
diff --git a/base/common/src/com/netscape/certsrv/usrgrp/IUGSubsystem.java b/base/common/src/com/netscape/certsrv/usrgrp/IUGSubsystem.java
index bbd051324..eb7f84ebf 100644
--- a/base/common/src/com/netscape/certsrv/usrgrp/IUGSubsystem.java
+++ b/base/common/src/com/netscape/certsrv/usrgrp/IUGSubsystem.java
@@ -125,6 +125,15 @@ public interface IUGSubsystem extends ISubsystem, IUsrGrp {
     public Enumeration<IGroup> findGroups(String filter) throws EUsrGrpException;
 
     /**
+     * Finds groups that contain the user.
+     *
+     * @param userDn the user DN
+     * @return a list of groups that contain the given user
+     * @throws EUsrGrpException
+     */
+    public Enumeration<IGroup> findGroupsByUser(String userDn) throws EUsrGrpException;
+
+    /**
      * Find a group for the given name
      *
      * @param name the given name