shaba/one
1
0
Fork 0
mirror of https://github.com/OpenNebula/one.git synced 2025-03-20 10:50:08 +03:00
Code Releases Wiki Activity

Include new Kerberos remote auth

Browse Source 
(cherry picked from commit 0b94f2fc41f7c5ab9eeb628c922988c5f0e60192)
This commit is contained in:
lsimngar 2015-08-27 11:03:10 +02:00 committed by Javi Fontan
parent ba28277d05
commit eff0e0d68e
2 changed files with 41 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/cloud/common/CloudAuth.rb
View File

@ -23,6 +23,7 @@ class CloudAuth
"sunstone" => 'SunstoneCloudAuth' ,
"ec2" => 'EC2CloudAuth',
"x509" => 'X509CloudAuth',
"remote" => 'RemoteCloudAuth',
"opennebula" => 'OpenNebulaCloudAuth',
"onegate" => 'OneGateCloudAuth'
}

40
src/cloud/common/CloudAuth/RemoteCloudAuth.rb Normal file
View File

@ -0,0 +1,40 @@
# -------------------------------------------------------------------------- #
# Copyright 2002-2015, OpenNebula Project (OpenNebula.org), C12G Labs #
# #
# Licensed under the Apache License, Version 2.0 (the "License"); you may #
# not use this file except in compliance with the License. You may obtain #
# a copy of the License at #
# #
# http://www.apache.org/licenses/LICENSE-2.0 #
# #
# Unless required by applicable law or agreed to in writing, software #
# distributed under the License is distributed on an "AS IS" BASIS, #
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. #
# See the License for the specific language governing permissions and #
# limitations under the License. #
#--------------------------------------------------------------------------- #
require 'opennebula/x509_auth'
module RemoteCloudAuth
def do_auth(env, params={})
# For Kerberos, the web service should be set to include the remote_user in the environment.
remote_user = env['REMOTE_USER']
remote_user = nil if remote_user == '(null)'
# Use the https credentials for authentication
unless remote_user.nil?
# Password should be REMOTE_USER itself.
username = get_username(remote_user)
if username
return username
else
raise "Username not found in local database: " + remote_user
end
else
raise "REMOTE_USER not found in local environment"
end
return nil
end
end