try { // Establish connection with the WebSphere user registry javax.naming.InitialContext initialContext = new javax.naming.InitialContext(); com.ibm.websphere.security.UserRegistry registry = (com.ibm.websphere.security .UserRegistry) initialContext.lookup("UserRegistry"); // Retrieves the user from the UserRegistry, if the user is not found // an EntryNotFoundException will be encountered String uniqueID = registry.getUniqueUserId(username); String uid = com.ibm.wsspi.security.token.WSSecurityPropagationHelper .getUserFromUniqueID (uniqueID); // Retrieve the securityName for the checkPassword method String securityName = registry.getUserSecurityName(uid); /* * Ignore warning, checkPassword returns string if securityName and * password are correct otherwise, it throws a PasswordCheckFailedException */ @SuppressWarnings("unused") String passwordCheck = registry.checkPassword(securityName, password); // IF and when no exceptions were encountered, authentication is successful // --- insert things-to-do-once-authenticated code here --- catch (EntryNotFoundException enfe) { // User is not in the registry System.out.println("Invalid username/password"); } catch (PasswordCheckFailedException pcfe) { // User is in the registry but the password is not right System.out.println("Invalid username/password"); } catch (Exception e) { // Catch all scenario System.out.println("Oh snap! Some shit just happened."); }
Friday, June 27, 2014
(J2EE) WebSphere User Registry lookup and password check
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment