From: Dmitriy S. <sha...@gm...> - 2010-06-18 03:45:24
|
On Thu, 2010-06-17 at 17:59 -0500, Loren Cahlander wrote: > org.exist.security.ldap.SecurityManagerImpl Can it org.exist.security.ldap.RealmImpl.java? The design is quite simple: one SecurityManager - several Realms attached to it. http://exist.svn.sourceforge.net/viewvc/exist/branches/shabanovd/animo/src/org/exist/security/ on authentication request the method in SecurityManager will be call: public Account authenticate(String username, Object credentials) throws ExceptionAuthentication { Account account = null; for (Realm realm : realms.values()) { account = realm.authenticate(username, credentials); if (account != null) return account; } throw new ExceptionAuthentication("User [" + username + "] not found"); } As you can see it will go throw all attached realms & try to get authenticated user account. -- Cheers, Dmitriy Shabanov |