com.theorem.radserver3
Class AccessImpl

Object
  AccessImpl

public abstract class AccessImpl

extends Object

Abstract class for implementing authentication methods.

There is an example of a very simple Access-Request / Access-Challenge system in AccessChallenge.java.

See Also:

LogImpl, LogImplFactory, AccessImplFactory

Constructor Summary

AccessImpl()

Method Summary

abstract void	authenticate(AuthInfo ai) Authenticate either through a simple Access-Accept or using an Access-Challenge.
abstract void	logs(LogImpl svrLog, LogImpl dbgLog) Connects the implementation to the server logs.

Methods inherited from class Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AccessImpl

public AccessImpl()

Method Detail

authenticate

public abstract void authenticate(AuthInfo ai)
                           throws AccessRejectException,
                                  AccessDropException

Authenticate either through a simple Access-Accept or using an Access-Challenge.

There are a number of authentication methods available in the AuthInfo class including PAP, CHAP, MSCHAP, LEAP, and others.

If the method returns normally a response packet will be sent. Use AuthInfo.setAccessAccept() to set the response packet type for a successful authentication.

Use or AuthInfo.setAccessChallenge() to continue to the next step in authentication. Some authentication methods like LEAP automatically conduct the challenges.

A rejection may either be sent by throwing an AccessRejectException or using the method AuthInfo.setAccessReject() and returning.Throwing the AccessRejectException will automatically log the rejection if logging failures is enabled.

Set the response attributes using the setResponseAttributes() method.

To simply not respond to a request throw AccessDropException. No response will be generated. This is sometimes done to offer 'security through obscurity' and avoid leaking information.

Parameters:

ai - AuthInfo object for authentication.

Throws:

AccessRejectException - if authentication fails and an Access-Reject packet is to be sent.

AccessDropException - if authentication fails and no response is to be sent. The message in the exceptions will be written to the server log as failures.

logs

public abstract void logs(LogImpl svrLog,
                          LogImpl dbgLog)

Connects the implementation to the server logs. The logging classes are made available to the implementation for reporting this and that. These classes are defined in the RADIUSServer class. This method will be called when the authentication server is started.

Parameters:

svrLog - Server log class

dbgLog - Debug log class

See Also:

RADIUSServer