javax.security.auth.login.AppConfigurationEntry.LoginModuleControlFlag Java Examples

The following examples show how to use javax.security.auth.login.AppConfigurationEntry.LoginModuleControlFlag. You can vote up the ones you like or vote down the ones you don't like, and go to the original project or source file by following the links above each example. You may check out the related API usage on the sidebar.

Example #1

Source File: KerberosUtil.java From pentaho-kettle with Apache License 2.0

6 votes

public LoginContext getLoginContextFromUsernamePassword( final String principal, final String password ) throws LoginException {
  Map<String, String> opts = new HashMap<String, String>( LOGIN_CONFIG_OPTS_KERBEROS_USER );
  opts.put( "principal", principal );
  AppConfigurationEntry[] appConfigurationEntries =
      new AppConfigurationEntry[] { new AppConfigurationEntry( Krb5LoginModule.class.getName(),
          LoginModuleControlFlag.REQUIRED, opts ) };
  return new LoginContext( KERBEROS_APP_NAME, new Subject(), new CallbackHandler() {

    @Override
    public void handle( Callback[] callbacks ) throws IOException, UnsupportedCallbackException {
      for ( Callback callback : callbacks ) {
        if ( callback instanceof NameCallback ) {
          ( (NameCallback) callback ).setName( principal );
        } else if ( callback instanceof PasswordCallback ) {
          ( (PasswordCallback) callback ).setPassword( password.toCharArray() );
        } else {
          throw new UnsupportedCallbackException( callback );
        }
      }
    }
  }, new PentahoLoginConfiguration( appConfigurationEntries ) );
}

Example #2

Source File: JaasConfiguration.java From registry with Apache License 2.0

6 votes

private AppConfigurationEntry parseAppConfigurationEntry(StreamTokenizer tokenizer) throws IOException {
    String loginModule = tokenizer.sval;
    if (tokenizer.nextToken() == StreamTokenizer.TT_EOF)
        throw new IllegalArgumentException("Login module control flag not specified in JAAS config");
    LoginModuleControlFlag controlFlag = loginModuleControlFlag(tokenizer.sval);
    Map<String, String> options = new HashMap<>();
    while (tokenizer.nextToken() != StreamTokenizer.TT_EOF && tokenizer.ttype != ';') {
        String key = tokenizer.sval;
        if (tokenizer.nextToken() != '=' || tokenizer.nextToken() == StreamTokenizer.TT_EOF || tokenizer.sval == null)
            throw new IllegalArgumentException("Value not specified for key '" + key + "' in JAAS config");
        String value = tokenizer.sval;
        options.put(key, value);
    }
    if (tokenizer.ttype != ';')
        throw new IllegalArgumentException("JAAS config entry not terminated by semi-colon");
    return new AppConfigurationEntry(loginModule, controlFlag, options);
}

Example #3

Source File: JaasConfiguration.java From registry with Apache License 2.0

6 votes

private LoginModuleControlFlag loginModuleControlFlag(String flag) {
    LoginModuleControlFlag controlFlag;
    switch (flag.toUpperCase(Locale.ROOT)) {
        case "REQUIRED":
            controlFlag = LoginModuleControlFlag.REQUIRED;
            break;
        case "REQUISITE":
            controlFlag = LoginModuleControlFlag.REQUISITE;
            break;
        case "SUFFICIENT":
            controlFlag = LoginModuleControlFlag.SUFFICIENT;
            break;
        case "OPTIONAL":
            controlFlag = LoginModuleControlFlag.OPTIONAL;
            break;
        default:
            throw new IllegalArgumentException("Invalid login module control flag '" + flag + "' in JAAS config");
    }
    return controlFlag;
}

Example #4

Source File: AuthTestUtil.java From incubator-retired-wave with Apache License 2.0

6 votes

public static Configuration makeConfiguration() {
  return new Configuration() {
    @Override
    public AppConfigurationEntry[] getAppConfigurationEntry(String name) {
      if (name.equals("Wave")) {
        AppConfigurationEntry entry =
            new AppConfigurationEntry(AccountStoreLoginModule.class.getName(),
                LoginModuleControlFlag.REQUIRED, new HashMap<String, Object>());

        return new AppConfigurationEntry[] {entry};
      } else {
        return null;
      }
    }
  };
}

Example #5

Source File: JAASLoginInterceptorTest.java From cxf with Apache License 2.0

6 votes

private JAASLoginInterceptor createTestJaasLoginInterceptor() {
    JAASLoginInterceptor jaasInt = new JAASLoginInterceptor();
    jaasInt.setReportFault(true);
    Configuration config = new Configuration() {

        @Override
        public AppConfigurationEntry[] getAppConfigurationEntry(String name) {
            Map<String, String> options = new HashMap<>();
            AppConfigurationEntry configEntry = new AppConfigurationEntry(
                                                                          TestUserPasswordLoginModule.class
                                                                              .getName(),
                                                                          LoginModuleControlFlag.REQUIRED,
                                                                          options);
            return Collections.singleton(configEntry).toArray(new AppConfigurationEntry[] {});
        }
    };
    jaasInt.setLoginConfig(config);
    return jaasInt;
}

Example #6

Source File: JAASServer.java From cxf with Apache License 2.0

6 votes

private JAASLoginInterceptor createTestJaasLoginInterceptor() {
    JAASLoginInterceptor jaasInt = new JAASLoginInterceptor();
    jaasInt.setReportFault(true);
    Configuration config = new Configuration() {

        @Override
        public AppConfigurationEntry[] getAppConfigurationEntry(String name) {
            Map<String, String> options = new HashMap<>();
            AppConfigurationEntry configEntry = new AppConfigurationEntry(
                                                                          TestUserPasswordLoginModule.class
                                                                              .getName(),
                                                                          LoginModuleControlFlag.REQUIRED,
                                                                          options);
            return Collections.singleton(configEntry).toArray(new AppConfigurationEntry[] {});
        }
    };
    jaasInt.setLoginConfig(config);
    return jaasInt;
}

Example #7

Source File: AuthTestUtil.java From swellrt with Apache License 2.0

6 votes

public static Configuration makeConfiguration() {
  return new Configuration() {
    @Override
    public AppConfigurationEntry[] getAppConfigurationEntry(String name) {
      if (name.equals("Wave")) {
        AppConfigurationEntry entry =
            new AppConfigurationEntry(AccountStoreLoginModule.class.getName(),
                LoginModuleControlFlag.REQUIRED, new HashMap<String, Object>());

        return new AppConfigurationEntry[] {entry};
      } else {
        return null;
      }
    }
  };
}

Example #8

Source File: KerberosAuth.java From attic-apex-core with Apache License 2.0

5 votes

@Override
public AppConfigurationEntry[] getAppConfigurationEntry(String name)
{
  if (name.equals(com.datatorrent.stram.security.KerberosAuth.class.getName())) {
    AppConfigurationEntry[] configEntries = new AppConfigurationEntry[1];
    HashMap<String, String> params = new HashMap<>();
    params.put("useTicketCache", "true");
    params.put("principal", principal);
    configEntries[0] = new AppConfigurationEntry("com.sun.security.auth.module.Krb5LoginModule",
        LoginModuleControlFlag.REQUIRED, params);
    return configEntries;
  } else {
    return null;
  }
}

Example #9

Source File: Krb5LoginConfiguration.java From directory-ldap-api with Apache License 2.0

5 votes

/**
 * Creates a new instance of Krb5LoginConfiguration.
 */
public Krb5LoginConfiguration()
{
    String loginModule = "com.sun.security.auth.module.Krb5LoginModule";

    HashMap<String, Object> options = new HashMap<>();

    // TODO: this only works for Sun JVM
    options.put( "refreshKrb5Config", "true" );

    LoginModuleControlFlag flag = LoginModuleControlFlag.REQUIRED;
    configList[0] = new AppConfigurationEntry( loginModule, flag, options );
}

Example #10

Source File: LoginConfiguration.java From unitime with Apache License 2.0

5 votes

public void init() {
	Debug.info("Configuring authentication service ...");
	String m = ApplicationProperty.AuthenticationModules.value();
	String[] modules = (m == null || m.isEmpty() ? new String[] {} : m.split(";"));
	sEntries = new AppConfigurationEntry[modules.length];
	for (int idx = 0; idx < modules.length; idx++) {
		HashMap<String, Object> options = new HashMap<String, Object>();
		String[] module = modules[idx].split(" ");
		LoginModuleControlFlag flag = LoginModuleControlFlag.SUFFICIENT;
		String name = module[module.length == 1 ? 0 : 1];
		if (module.length > 1) {
			String f = module[0];
			if (f.equalsIgnoreCase("sufficient")) flag = LoginModuleControlFlag.SUFFICIENT;
			else if (f.equalsIgnoreCase("optional")) flag = LoginModuleControlFlag.OPTIONAL;
			else if (f.equalsIgnoreCase("required")) flag = LoginModuleControlFlag.REQUIRED;
			else if (f.equalsIgnoreCase("requisite")) flag = LoginModuleControlFlag.REQUISITE;
		}
		if (module.length > 2)
			for (int i = 2; i < module.length; i++) {
				String[] option = module[i].split("=");
				if (option.length == 1)
					options.put(option[0], "true");
				else
					options.put(option[0], option[1]);
			}
		Debug.info("  Using " + flag + " " + name + " " + options);
		sEntries[idx] = new AppConfigurationEntry(name, flag, options);
	}
}

Example #11

Source File: SecurityDomainJBossASClient.java From hawkular-agent with Apache License 2.0

5 votes

public String getFlagString() {
    if (LoginModuleControlFlag.SUFFICIENT.equals(entry.getControlFlag())) {
        return "sufficient";
    }
    if (LoginModuleControlFlag.REQUISITE.equals(entry.getControlFlag())) {
        return "requisite";
    }
    if (LoginModuleControlFlag.REQUIRED.equals(entry.getControlFlag())) {
        return "required";
    }

    // return the last possibility
    return "optional";
}

Example #12

Source File: SecureClientLogin.java From ranger with Apache License 2.0

5 votes

@Override
public AppConfigurationEntry[] getAppConfigurationEntry(String appName) {
	AppConfigurationEntry KEYTAB_KERBEROS_LOGIN = new AppConfigurationEntry(KerberosUtil.getKrb5LoginModuleName(), LoginModuleControlFlag.REQUIRED, kerberosOptions);
	if (usePassword) {
		AppConfigurationEntry KERBEROS_PWD_SAVER = new AppConfigurationEntry(KrbPasswordSaverLoginModule.class.getName(), LoginModuleControlFlag.REQUIRED, kerberosOptions);
		return new AppConfigurationEntry[] { KERBEROS_PWD_SAVER, KEYTAB_KERBEROS_LOGIN };
	}
	else {
		return new AppConfigurationEntry[] { KEYTAB_KERBEROS_LOGIN };
	}
}

Example #13

Source File: LoginUtil.java From elasticsearch-hadoop with Apache License 2.0

5 votes

@Override
public AppConfigurationEntry[] getAppConfigurationEntry(String name) {
    Map<String, String> options = new HashMap<>();
    options.put("principal", principalName);
    options.put("storeKey", "true");
    options.put("isInitiator", "true");
    options.put("refreshKrb5Config", "true");
    return new AppConfigurationEntry[] {
            new AppConfigurationEntry(SUN_KRB5_LOGIN_MODULE, LoginModuleControlFlag.REQUIRED, options)
    };
}

Example #14

Source File: LoginUtil.java From elasticsearch-hadoop with Apache License 2.0

5 votes

@Override
public AppConfigurationEntry[] getAppConfigurationEntry(String name) {
    Map<String, String> options = new HashMap<>();
    options.put("doNotPrompt", "true");
    options.put("principal", principalName);
    options.put("storeKey", "true");
    options.put("isInitiator", "true");
    options.put("refreshKrb5Config", "true");
    options.put("useKeyTab", "true");
    options.put("keyTab", keytabFile);
    return new AppConfigurationEntry[] {
            new AppConfigurationEntry(SUN_KRB5_LOGIN_MODULE, LoginModuleControlFlag.REQUIRED, options)
    };
}

Example #15

Source File: LoginContextBuilder.java From wildfly-camel with Apache License 2.0

5 votes

private LoginContext getClientLoginContext() throws LoginException {
    Configuration config = new Configuration() {
        @Override
        public AppConfigurationEntry[] getAppConfigurationEntry(String name) {
            Map<String, String> options = new HashMap<String, String>();
            options.put("multi-threaded", "true");
            options.put("restore-login-identity", "true");

            AppConfigurationEntry clmEntry = new AppConfigurationEntry(ClientLoginModule.class.getName(), LoginModuleControlFlag.REQUIRED, options);
            return new AppConfigurationEntry[] { clmEntry };
        }
    };
    return getLoginContext(config);
}

Example #16

Source File: KerberosUtil.java From pentaho-kettle with Apache License 2.0

5 votes

public LoginContext getLoginContextFromKeytab( String principal, String keytab ) throws LoginException {
  Map<String, String> keytabConfig = new HashMap<String, String>( LOGIN_CONFIG_OPTS_KERBEROS_KEYTAB );
  keytabConfig.put( "keyTab", keytab );
  keytabConfig.put( "principal", principal );

  // Create the configuration and from them, a new login context
  AppConfigurationEntry config =
      new AppConfigurationEntry( Krb5LoginModule.class.getName(), LoginModuleControlFlag.REQUIRED, keytabConfig );
  AppConfigurationEntry[] configEntries = new AppConfigurationEntry[] { config };
  Subject subject = new Subject();
  return new LoginContext( KERBEROS_APP_NAME, subject, null, new PentahoLoginConfiguration( configEntries ) );
}

Example #17

Source File: KerberosUtil.java From pentaho-kettle with Apache License 2.0

5 votes

public LoginContext getLoginContextFromKerberosCache( String principal ) throws LoginException {
  Map<String, String> opts = new HashMap<String, String>( LOGIN_CONFIG_OPTS_KERBEROS_USER_NOPASS );
  opts.put( "principal", principal );
  AppConfigurationEntry[] appConfigurationEntries =
      new AppConfigurationEntry[] { new AppConfigurationEntry( Krb5LoginModule.class.getName(),
          LoginModuleControlFlag.REQUIRED, opts ) };
  return new LoginContext( KERBEROS_APP_NAME, new Subject(), null, new PentahoLoginConfiguration(
      appConfigurationEntries ) );
}

Example #18

Source File: PicketBoxProcessor.java From lams with GNU General Public License v2.0

5 votes

private AppConfigurationEntry.LoginModuleControlFlag getFlag(String flag)
{
   if("REQUIRED".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.REQUIRED;
   if("REQUISITE".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.REQUISITE;
   if("SUFFICIENT".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.SUFFICIENT;
   return LoginModuleControlFlag.OPTIONAL;
}

Example #19

Source File: KerberosAuth.java From Bats with Apache License 2.0

5 votes

@Override
public AppConfigurationEntry[] getAppConfigurationEntry(String name)
{
  if (name.equals(com.datatorrent.stram.security.KerberosAuth.class.getName())) {
    AppConfigurationEntry[] configEntries = new AppConfigurationEntry[1];
    HashMap<String, String> params = new HashMap<>();
    params.put("useTicketCache", "true");
    params.put("principal", principal);
    configEntries[0] = new AppConfigurationEntry("com.sun.security.auth.module.Krb5LoginModule",
        LoginModuleControlFlag.REQUIRED, params);
    return configEntries;
  } else {
    return null;
  }
}

Example #20

Source File: AuthenticationInfo.java From lams with GNU General Public License v2.0

5 votes

private String valueOf(LoginModuleControlFlag controlFlag)
{
   if (controlFlag.equals(LoginModuleControlFlag.OPTIONAL))
      return "optional";
   if (controlFlag.equals(LoginModuleControlFlag.REQUIRED))
      return "required";
   if (controlFlag.equals(LoginModuleControlFlag.REQUISITE))
      return "requisite";
   return "sufficient";
}

Example #21

Source File: JASPIAuthenticationInfo.java From lams with GNU General Public License v2.0

5 votes

private String valueOf(LoginModuleControlFlag controlFlag)
{
   if (controlFlag.equals(LoginModuleControlFlag.OPTIONAL))
      return "optional";
   if (controlFlag.equals(LoginModuleControlFlag.REQUIRED))
      return "required";
   if (controlFlag.equals(LoginModuleControlFlag.REQUISITE))
      return "requisite";
   return "sufficient";
}

Example #22

Source File: AuthenticationJASPIConfigParser.java From lams with GNU General Public License v2.0

5 votes

@SuppressWarnings("unchecked")
private AppConfigurationEntry getJAASEntry(XMLEventReader xmlEventReader) throws XMLStreamException
{
   XMLEvent xmlEvent = xmlEventReader.nextEvent();
   Map<String, Object> options = new HashMap<String, Object>();

   String codeName = null;
   LoginModuleControlFlag controlFlag = LoginModuleControlFlag.REQUIRED;

   //We got the login-module element
   StartElement loginModuleElement = (StartElement) xmlEvent;
   //We got the login-module element
   Iterator<Attribute> attrs = loginModuleElement.getAttributes();
   while (attrs.hasNext())
   {
      Attribute attribute = attrs.next();
      QName attQName = attribute.getName();
      String attributeValue = StaxParserUtil.getAttributeValue(attribute);

      if ("code".equals(attQName.getLocalPart()))
      {
         codeName = attributeValue;
      }
      else if ("flag".equals(attQName.getLocalPart()))
      {
         controlFlag = getControlFlag(attributeValue);
      }
   }
   //See if there are options
   ModuleOptionParser moParser = new ModuleOptionParser();
   options.putAll(moParser.parse(xmlEventReader));

   return new AppConfigurationEntry(codeName, controlFlag, options);
}

Example #23

Source File: AuthenticationJASPIConfigParser.java From lams with GNU General Public License v2.0

5 votes

private LoginModuleControlFlag getControlFlag(String flag)
{
   if ("required".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.REQUIRED;
   if ("sufficient".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.SUFFICIENT;
   if ("optional".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.OPTIONAL;
   if ("requisite".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.REQUISITE;
   throw PicketBoxMessages.MESSAGES.invalidControlFlag(flag);
}

Example #24

Source File: AuthenticationConfigParser.java From lams with GNU General Public License v2.0

5 votes

@SuppressWarnings("unchecked")
private AppConfigurationEntry getEntry(XMLEventReader xmlEventReader) throws XMLStreamException
{
   XMLEvent xmlEvent = xmlEventReader.nextEvent();
   Map<String, Object> options = new HashMap<String,Object>();
   
   String codeName = null;
   LoginModuleControlFlag controlFlag = LoginModuleControlFlag.REQUIRED;
   
   //We got the login-module element
   StartElement loginModuleElement = (StartElement) xmlEvent;
   //We got the login-module element
   Iterator<Attribute> attrs = loginModuleElement.getAttributes();
   while(attrs.hasNext())
   {
      Attribute attribute = attrs.next();
      
      QName attQName = attribute.getName();
      String attributeValue = StaxParserUtil.getAttributeValue(attribute);
      
      if("code".equals(attQName.getLocalPart()))
      {
         codeName = attributeValue;
      }
      else if("flag".equals(attQName.getLocalPart()))
      {
         controlFlag = getControlFlag(attributeValue);
      } 
   } 
   //See if there are options
   ModuleOptionParser moParser = new ModuleOptionParser();
   options.putAll(moParser.parse(xmlEventReader));
   
   return new AppConfigurationEntry(codeName, controlFlag, options); 
}

Example #25

Source File: AuthenticationConfigParser.java From lams with GNU General Public License v2.0

5 votes

private LoginModuleControlFlag getControlFlag(String flag)
{
   if("required".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.REQUIRED;
   if("sufficient".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.SUFFICIENT;
   if("optional".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.OPTIONAL;
   if("requisite".equalsIgnoreCase(flag))
      return LoginModuleControlFlag.REQUISITE;

   throw PicketBoxMessages.MESSAGES.invalidControlFlag(flag);
}

Example #26

Source File: ManagedUserRealm.java From openhab-core with Eclipse Public License 2.0

5 votes

@Override
public AppConfigurationEntry[] getEntries() {
    Map<String, Object> options = new HashMap<>();
    options.put(ProxyLoginModule.PROPERTY_MODULE, MODULE_CLASS);

    return new AppConfigurationEntry[] {
            new AppConfigurationEntry(MODULE_CLASS, LoginModuleControlFlag.SUFFICIENT, options) };
}

Example #27

Source File: StaticJAASConfiguration.java From jcifs with GNU Lesser General Public License v2.1

5 votes

/**
 * {@inheritDoc}
 *
 * @see javax.security.auth.login.Configuration#getAppConfigurationEntry(java.lang.String)
 */
@Override
public AppConfigurationEntry[] getAppConfigurationEntry ( String name ) {
    return new AppConfigurationEntry[] {
        new AppConfigurationEntry("com.sun.security.auth.module.Krb5LoginModule", LoginModuleControlFlag.REQUIRED, this.options)
    };
}

Example #28

Source File: StaticJAASConfiguration.java From jcifs-ng with GNU Lesser General Public License v2.1

5 votes

/**
 * {@inheritDoc}
 *
 * @see javax.security.auth.login.Configuration#getAppConfigurationEntry(java.lang.String)
 */
@Override
public AppConfigurationEntry[] getAppConfigurationEntry ( String name ) {
    return new AppConfigurationEntry[] {
        new AppConfigurationEntry("com.sun.security.auth.module.Krb5LoginModule", LoginModuleControlFlag.REQUIRED, this.options)
    };
}

Example #29

Source File: RangerAuthenticationProvider.java From ranger with Apache License 2.0

4 votes

public Authentication getUnixAuthentication(Authentication authentication) {

		try {
			String rangerLdapDefaultRole = PropertiesUtil.getProperty(
					"ranger.ldap.default.role", "ROLE_USER");
			DefaultJaasAuthenticationProvider jaasAuthenticationProvider = new DefaultJaasAuthenticationProvider();
			String loginModuleName = "org.apache.ranger.authentication.unix.jaas.RemoteUnixLoginModule";
			LoginModuleControlFlag controlFlag = LoginModuleControlFlag.REQUIRED;
			Map<String, String> options = PropertiesUtil.getPropertiesMap();
			AppConfigurationEntry appConfigurationEntry = new AppConfigurationEntry(
					loginModuleName, controlFlag, options);
			AppConfigurationEntry[] appConfigurationEntries = new AppConfigurationEntry[] { appConfigurationEntry };
			Map<String, AppConfigurationEntry[]> appConfigurationEntriesOptions = new HashMap<String, AppConfigurationEntry[]>();
			appConfigurationEntriesOptions.put("SPRINGSECURITY",
					appConfigurationEntries);
			Configuration configuration = new InMemoryConfiguration(
					appConfigurationEntriesOptions);
			jaasAuthenticationProvider.setConfiguration(configuration);
			RoleUserAuthorityGranter authorityGranter = new RoleUserAuthorityGranter();
			RoleUserAuthorityGranter[] authorityGranters = new RoleUserAuthorityGranter[] { authorityGranter };
			jaasAuthenticationProvider.setAuthorityGranters(authorityGranters);
			jaasAuthenticationProvider.afterPropertiesSet();
			String userName = authentication.getName();
			String userPassword = "";
			if (authentication.getCredentials() != null) {
				userPassword = authentication.getCredentials().toString();
			}

			// getting user authenticated
			if (userName != null && userPassword != null
					&& !userName.trim().isEmpty()
					&& !userPassword.trim().isEmpty()) {
				final List<GrantedAuthority> grantedAuths = new ArrayList<>();
				grantedAuths.add(new SimpleGrantedAuthority(
						rangerLdapDefaultRole));
				final UserDetails principal = new User(userName, userPassword,
						grantedAuths);
				final Authentication finalAuthentication = new UsernamePasswordAuthenticationToken(
						principal, userPassword, grantedAuths);
				authentication = jaasAuthenticationProvider
						.authenticate(finalAuthentication);
				authentication=getAuthenticationWithGrantedAuthority(authentication);
				return authentication;
			} else {
				return authentication;
			}
		} catch (Exception e) {
			logger.debug("Unix Authentication Failed:", e);
		}

		return authentication;
	}

Example #30

Source File: RangerAuthenticationProvider.java From ranger with Apache License 2.0

4 votes

public Authentication getPamAuthentication(Authentication authentication) {
	try {
		String rangerLdapDefaultRole = PropertiesUtil.getProperty(
				"ranger.ldap.default.role", "ROLE_USER");
		DefaultJaasAuthenticationProvider jaasAuthenticationProvider = new DefaultJaasAuthenticationProvider();
		String loginModuleName = "org.apache.ranger.authentication.unix.jaas.PamLoginModule";
		LoginModuleControlFlag controlFlag = LoginModuleControlFlag.REQUIRED;
		Map<String, String> options = PropertiesUtil.getPropertiesMap();

		if (!options.containsKey("ranger.pam.service"))
			options.put("ranger.pam.service", "ranger-admin");

		AppConfigurationEntry appConfigurationEntry = new AppConfigurationEntry(
				loginModuleName, controlFlag, options);
		AppConfigurationEntry[] appConfigurationEntries = new AppConfigurationEntry[] { appConfigurationEntry };
		Map<String, AppConfigurationEntry[]> appConfigurationEntriesOptions = new HashMap<String, AppConfigurationEntry[]>();
		appConfigurationEntriesOptions.put("SPRINGSECURITY",
				appConfigurationEntries);
		Configuration configuration = new InMemoryConfiguration(
				appConfigurationEntriesOptions);
		jaasAuthenticationProvider.setConfiguration(configuration);
		RoleUserAuthorityGranter authorityGranter = new RoleUserAuthorityGranter();
		RoleUserAuthorityGranter[] authorityGranters = new RoleUserAuthorityGranter[] { authorityGranter };
		jaasAuthenticationProvider.setAuthorityGranters(authorityGranters);
		jaasAuthenticationProvider.afterPropertiesSet();
		String userName = authentication.getName();
		String userPassword = "";
		if (authentication.getCredentials() != null) {
			userPassword = authentication.getCredentials().toString();
		}

		// getting user authenticated
		if (userName != null && userPassword != null
				&& !userName.trim().isEmpty()
				&& !userPassword.trim().isEmpty()) {
			final List<GrantedAuthority> grantedAuths = new ArrayList<>();
			grantedAuths.add(new SimpleGrantedAuthority(
					rangerLdapDefaultRole));
			final UserDetails principal = new User(userName, userPassword,
					grantedAuths);
			final Authentication finalAuthentication = new UsernamePasswordAuthenticationToken(
					principal, userPassword, grantedAuths);
			authentication = jaasAuthenticationProvider
					.authenticate(finalAuthentication);
			authentication=getAuthenticationWithGrantedAuthority(authentication);
			return authentication;
		} else {
			return authentication;
		}
	} catch (Exception e) {
		logger.debug("Pam Authentication Failed:", e);
	}
	return authentication;
}