/*
|
* CDDL HEADER START
|
*
|
* The contents of this file are subject to the terms of the
|
* Common Development and Distribution License (the "License").
|
* You may not use this file except in compliance with the License.
|
*
|
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
|
* or http://www.opensolaris.org/os/licensing.
|
* See the License for the specific language governing permissions
|
* and limitations under the License.
|
*
|
* When distributing Covered Code, include this CDDL HEADER in each
|
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
|
* If applicable, add the following below this CDDL HEADER, with the
|
* fields enclosed by brackets "[]" replaced with your own identifying
|
* information: Portions Copyright [yyyy] [name of copyright owner]
|
*
|
* CDDL HEADER END
|
*/
|
|
/*
|
* Copyright (c) 2010, 2013, Oracle and/or its affiliates. All rights reserved.
|
*/
|
|
package com.oracle.solaris.vp.panels.usermgr.client.swing;
|
|
import java.util.*;
|
import java.util.logging.Level;
|
import javax.management.ObjectName;
|
import javax.swing.Icon;
|
import com.oracle.solaris.adr.Stability;
|
import com.oracle.solaris.rad.ObjectException;
|
import com.oracle.solaris.vp.panel.common.*;
|
import com.oracle.solaris.vp.panel.common.action.*;
|
import com.oracle.solaris.vp.panel.common.api.panel.MBeanUtil;
|
import com.oracle.solaris.vp.panel.common.control.*;
|
import com.oracle.solaris.vp.panel.common.model.*;
|
import com.oracle.solaris.vp.panel.swing.control.PanelFrameControl;
|
import com.oracle.solaris.vp.panel.swing.model.SwingPanelDescriptor;
|
import com.oracle.solaris.rad.usermgr.*;
|
import com.oracle.solaris.vp.util.misc.*;
|
import com.oracle.solaris.vp.util.misc.finder.Finder;
|
import com.oracle.solaris.vp.util.misc.property.*;
|
import com.oracle.solaris.vp.util.swing.HasIcons;
|
|
public class UserMgrPanelDescriptor
|
extends AbstractPanelDescriptor<UserManagedObject>
|
implements SwingPanelDescriptor<UserManagedObject>, HasIcons,
|
ConnectionListener {
|
|
//
|
// Static data
|
//
|
|
// Constants needed for registering the MBean
|
public static final String INTERFACE_NAME =
|
"com.oracle.solaris.rad.usermgr";
|
public static final ObjectName OBJECT_NAME =
|
MBeanUtil.makeObjectName(INTERFACE_NAME, "UserMgr");
|
|
public static final String USER_TYPE_NORMAL = "normal";
|
public static final String SCOPE_FILES = "files";
|
public static final String MATCH_ALL = "";
|
|
public static final String PASSWORD = "PASSWORD";
|
public static final String NOTACTIVATED = "NOTACTIVATED";
|
public static final String LOCKED = "LOCKED";
|
public static final String UNKNOWN = "UNKNOWN";
|
|
//
|
// Instance data
|
//
|
|
private MainControl mc;
|
private DefaultControl control;
|
private MXBeanTracker<UserMgrMXBean> beanTracker;
|
private UserType uType;
|
|
private String scopeStr = SCOPE_FILES;
|
private String typeStr = USER_TYPE_NORMAL;
|
private String matchStr = MATCH_ALL;
|
|
// Assignable lists
|
private List<String> scopeList = null;
|
private List<String> shellList = null;
|
private List<Group> groupList = null;
|
private List<String> profileList = null;
|
private List<String> authProfileList = null;
|
private List<String> authList = null;
|
private List<String> roleList = null;
|
private List<String> supplgroups = null;
|
|
private User defUser = null;
|
|
//
|
// Constructors
|
//
|
|
/**
|
* Constructs a {@code UserMgrPanelDescriptor}.
|
*
|
* @param id
|
* a unique identifier for this Panel, taken from the panel
|
* registration
|
*
|
* @param context
|
* a handle to interact with the Visual Panels client
|
*/
|
public UserMgrPanelDescriptor(String id, ClientContext context)
|
throws TrackerException, ActionFailedException {
|
|
super(id, context);
|
|
beanTracker = new MXBeanTracker<UserMgrMXBean>(
|
OBJECT_NAME, UserMgrMXBean.class, Stability.PRIVATE, context);
|
|
setComparator(SimpleHasId.COMPARATOR);
|
|
// Initialize list of users
|
initUsers(SCOPE_FILES, USER_TYPE_NORMAL, MATCH_ALL);
|
|
control = new PanelFrameControl<UserMgrPanelDescriptor>(this);
|
mc = new MainControl(this);
|
control.addChildren(mc);
|
context.addConnectionListener(this);
|
}
|
|
//
|
// PanelDescriptor methods
|
//
|
|
/**
|
* Returns the top-most Control for this PanelDescriptor.
|
*/
|
@Override
|
public Control getControl() {
|
return control;
|
}
|
|
//
|
// HasIcons methods
|
//
|
|
/**
|
* Returns a list of icons.
|
*/
|
@Override
|
public List<? extends Icon> getIcons() {
|
return UserManagedObject.userIcons;
|
}
|
|
//
|
// ManagedObject methods
|
//
|
|
/**
|
* Stops monitoring the connection to the remote host.
|
*/
|
@Override
|
public void dispose() {
|
beanTracker.dispose();
|
super.dispose();
|
}
|
|
/**
|
* Returns the name of this Managed Object.
|
*/
|
@Override
|
public String getName() {
|
return Finder.getString("panel.usermgr.name");
|
}
|
|
//
|
// AbstractManagedObject methods
|
//
|
|
@Override
|
public void addChildren(UserManagedObject... toAdd) {
|
super.addChildren(toAdd);
|
|
ChangeableAggregator aggregator = getChangeableAggregator();
|
for (UserManagedObject umo : toAdd) {
|
aggregator.addChangeables(umo.getChangeableAggregator());
|
}
|
}
|
|
//
|
// UserMgrPanelDescriptor methods
|
//
|
|
public void removeChildren(UserManagedObject toRemove) {
|
super.removeChildren(toRemove);
|
|
ChangeableAggregator aggregator = getChangeableAggregator();
|
aggregator.removeChangeable(toRemove.getChangeableAggregator());
|
}
|
|
public void removeAllChildren() {
|
super.clearChildren();
|
ChangeableAggregator aggregator = getChangeableAggregator();
|
aggregator.reset();
|
}
|
|
public UserMgrMXBean getUserMgrBean() {
|
return beanTracker.getBean();
|
}
|
|
public UserManagedObject getUserManagedObject(String id) {
|
|
SimpleHasId tmpHasId = new SimpleHasId();
|
synchronized (children) {
|
tmpHasId.setId(id);
|
int index = Collections.binarySearch(children, tmpHasId,
|
SimpleHasId.COMPARATOR);
|
|
if (index >= 0) {
|
return children.get(index);
|
}
|
|
return null;
|
}
|
}
|
|
public void deleteUserManagedObject(UserManagedObject toRemove) {
|
removeChildren(toRemove);
|
}
|
|
public void addUserManagedObject(UserManagedObject toAdd) {
|
addChildren(toAdd);
|
}
|
|
public void saveDeletedUser(UserManagedObject umo)
|
throws ActionAbortedException,
|
ActionFailedException, ActionUnauthorizedException {
|
|
try {
|
getUserMgrBean().deleteUser(umo.getName());
|
deleteUserManagedObject(umo);
|
} catch (SecurityException se) {
|
throw new ActionUnauthorizedException(se);
|
} catch (ObjectException e) {
|
UserMgrError ume = e.getPayload(UserMgrError.class);
|
String msg = Finder.getString("usermgr.error.invalidData");
|
String err = Finder.getString(
|
"usermgr.error.delete", umo.getUsername());
|
getLog().log(Level.SEVERE, err + msg, e);
|
throw new ActionFailedException(err + msg);
|
// Any other remaining exceptions
|
} catch (Exception e) {
|
String msg = Finder.getString("usermgr.error.system");
|
String err = Finder.getString(
|
"usermgr.error.delete", umo.getUsername());
|
getLog().log(Level.SEVERE, err + msg, e);
|
throw new ActionFailedException(err + msg);
|
}
|
}
|
|
public void saveAddedUser(UserManagedObject umo)
|
throws ActionAbortedException,
|
ActionFailedException, ActionUnauthorizedException {
|
|
try {
|
char[] password = umo.getPassword();
|
User user = getUserMgrBean().addUser(umo.getNewUser(), password);
|
addUserManagedObject(umo);
|
Arrays.fill(password, (char)0);
|
umo.updateUser(user);
|
|
} catch (SecurityException se) {
|
throw new ActionUnauthorizedException(se);
|
} catch (ObjectException e) {
|
UserMgrError ume = e.getPayload(UserMgrError.class);
|
String msg;
|
UserMgrErrorType error = (ume != null) ?
|
ume.getErrorCode() : UserMgrErrorType.INVALIDDATA;
|
switch (error) {
|
case USEREXISTS:
|
msg = Finder.getString("usermgr.error.userExists");
|
break;
|
case PASSERROR:
|
msg = Finder.getString("usermgr.error.passError");
|
break;
|
default: // Invalid Data
|
msg = Finder.getString("usermgr.error.invalidData");
|
break;
|
}
|
String err = Finder.getString("usermgr.error.add",
|
umo.getUsername());
|
getLog().log(Level.SEVERE, err + msg, e);
|
deleteUserManagedObject(umo);
|
throw new ActionFailedException(err + msg);
|
// Any other remaining exceptions
|
} catch (Exception e) {
|
String msg = Finder.getString("usermgr.error.system");
|
String err = Finder.getString(
|
"usermgr.error.add", umo.getUsername());
|
getLog().log(Level.SEVERE, err + msg, e);
|
throw new ActionFailedException(err + msg);
|
}
|
}
|
|
public void saveModifiedUsers() throws ActionAbortedException,
|
ActionFailedException, ActionUnauthorizedException {
|
|
List<UserManagedObject> kids = getChildren();
|
for (UserManagedObject umo : kids) {
|
if (umo.getChangeableAggregator().isChanged()) {
|
User user = umo.getModifiedUser();
|
UserChangeFields changes = umo.getModifiedChanges();
|
try {
|
if (user != null) {
|
char[] password = null;
|
if (umo.getPassProperty().isChanged())
|
password = umo.getPassword();
|
// System.out.println(umo.toString());
|
getUserMgrBean().modifyUser(user, password, changes);
|
if (password != null)
|
Arrays.fill(password, (char)0);
|
}
|
} catch (SecurityException se) {
|
throw new ActionUnauthorizedException(se);
|
} catch (ObjectException e) {
|
UserMgrError ume = e.getPayload(UserMgrError.class);
|
String msg;
|
UserMgrErrorType error = (ume != null) ?
|
ume.getErrorCode() : UserMgrErrorType.INVALIDDATA;
|
switch (error) {
|
case PASSERROR:
|
msg = Finder.getString("usermgr.error.passError");
|
break;
|
default:
|
msg = Finder.getString("usermgr.error.invalidData");
|
break;
|
}
|
String err = Finder.getString(
|
"usermgr.error.modify", umo.getUsername());
|
getLog().log(Level.SEVERE, err + msg, e);
|
throw new ActionFailedException(err + msg);
|
// Any other remaining exceptions
|
} catch (Exception e) {
|
String msg = Finder.getString("usermgr.error.system");
|
String err = Finder.getString(
|
"usermgr.error.modify", umo.getUsername());
|
getLog().log(Level.SEVERE, err + msg, e);
|
throw new ActionFailedException(err + msg);
|
}
|
umo.getChangeableAggregator().save();
|
}
|
}
|
}
|
|
public List<Group> getGroups() {
|
return groupList;
|
}
|
|
public List<String> getSupplGroups() {
|
return supplgroups;
|
}
|
|
public List<String> getShells() {
|
return shellList;
|
}
|
|
public List<String> getScopes() {
|
return scopeList;
|
}
|
|
public List<String> getProfiles() {
|
return profileList;
|
}
|
|
public List<String> getAuths() {
|
return authList;
|
}
|
|
public List<String> getRoles() {
|
return roleList;
|
}
|
|
public UserImpl getDefaultUser() {
|
UserImpl defaultUser = new UserImpl(
|
"", 0L, defUser.getGroupID(),
|
"", "", defUser.getDefaultShell(),
|
0, 0, 0, 0,
|
"", "", "", "", "", "",
|
"", "", "", "", "", "",
|
null, null, null, null, null, null, null);
|
|
return defaultUser;
|
}
|
|
public void initUsers(String scopeStr,
|
String typeStr, String matchStr)
|
throws ActionFailedException {
|
int count = 0;
|
String statusStr;
|
String listTitle;
|
|
|
|
statusStr = Finder.getString("usermgr.status.scope") +
|
" " + scopeStr;
|
if (typeStr.equals(USER_TYPE_NORMAL)) {
|
uType = UserType.NORMAL;
|
listTitle = Finder.getString("usermgr.list.title.user");
|
} else {
|
uType = UserType.ROLE;
|
listTitle = Finder.getString("usermgr.list.title.role");
|
}
|
|
|
removeAllChildren();
|
try {
|
UserMgrMXBean bean = getUserMgrBean();
|
|
// Set scope only if the scope changed
|
if (scopeStr.equals(this.scopeStr) == false) {
|
ScopeType sType;
|
if (scopeStr.equals(SCOPE_FILES)) {
|
sType = ScopeType.FILES;
|
} else {
|
sType = ScopeType.LDAP;
|
}
|
bean.selectScope(sType);
|
this.scopeStr = scopeStr;
|
}
|
|
setFilter(uType, matchStr);
|
this.typeStr = typeStr;
|
this.matchStr = matchStr;
|
|
List<User> users = getUsers();
|
|
boolean uTypeSet = false;
|
|
for (User user : users) {
|
String username = user.getUsername();
|
if (uTypeSet == false) {
|
uType = bean.getUserType(username);
|
uTypeSet = true;
|
}
|
|
UserManagedObject umo = new UserManagedObject(this,
|
user, uType, null, false);
|
addChildren(umo);
|
}
|
|
// Get Assignable Lists
|
scopeList = bean.getscopes();
|
groupList = bean.getgroups();
|
shellList = bean.getshells();
|
authList = bean.getauths();
|
profileList = bean.getprofiles();
|
roleList = bean.getroles();
|
supplgroups = bean.getsupplGroups();
|
defUser = bean.getdefaultUser();
|
|
} catch (Exception e) {
|
String msg = Finder.getString("usermgr.error.system");
|
throw new ActionFailedException(msg);
|
} finally {
|
setStatusText(statusStr);
|
if (mc != null) {
|
mc.setListTitle(listTitle);
|
}
|
}
|
}
|
|
/*
|
* Solaris provides 3 levels of password change:
|
* 1. Can change any password
|
* 2. Can only set initial password
|
* 3. Cannot change any password
|
*/
|
public boolean canChangePassword(UserManagedObject umo) {
|
String statusStr = defUser.getAccountStatus();
|
|
if (statusStr.equals(PASSWORD)) {
|
return true;
|
} else if (statusStr.equals(LOCKED)) {
|
return false;
|
} else if (statusStr.equals(NOTACTIVATED) && (umo == null ||
|
umo.getAccountStatus().equals(UNKNOWN) ||
|
umo.getAccountStatus().equals(NOTACTIVATED))) {
|
return true;
|
}
|
|
return false;
|
}
|
|
public boolean isTypeRole() {
|
return (uType == UserType.ROLE ? true : false);
|
}
|
|
public String getTypeString() {
|
return (uType == UserType.ROLE ? "role" : "user");
|
}
|
|
public String getScope() {
|
return (scopeStr);
|
}
|
|
public String getType() {
|
return (typeStr);
|
}
|
|
|
public String getMatch() {
|
return (matchStr);
|
}
|
|
/*
|
* Connection Listener interfaces
|
*/
|
|
/*
|
* If a role assumption or user change occurs because
|
* of permission/auth failure, initialize the users list
|
*/
|
public void connectionChanged(ConnectionEvent ce) {
|
try {
|
initUsers(scopeStr, typeStr, matchStr);
|
} catch (Exception e) {
|
getLog().log(Level.SEVERE, "Error setting filter.", e);
|
}
|
}
|
|
public void connectionFailed(ConnectionEvent ce) {
|
setStatusText(Finder.getString("usermgr.error.connfailed"));
|
}
|
|
//
|
// Get the user for the given user name
|
//
|
public User getUser(String name) {
|
|
User user = null;
|
|
try {
|
user = getUserMgrBean().getUser(name);
|
} catch (ObjectException e) {
|
getLog().log(Level.SEVERE, "Error getting user " +
|
name + " : ", e);
|
}
|
|
return user;
|
}
|
|
//
|
// Private methods
|
//
|
|
private List<User> getUsers() {
|
|
List<User> users = null;
|
try {
|
users = getUserMgrBean().getusers();
|
} catch (ObjectException e) {
|
getLog().log(Level.SEVERE, "Error getting user list.", e);
|
}
|
return users;
|
}
|
|
private void setFilter(UserType utype, String search) {
|
try {
|
getUserMgrBean().setFilter(utype, search);
|
} catch (Exception e) {
|
getLog().log(Level.SEVERE, "Error setting filter.", e);
|
}
|
}
|
}
|
