com.maverick.sshd

Interface AccessManager

All Known Implementing Classes:

AccessManagerAdapter

public interface AccessManager

Use this interface to control access to SSH services. To configure a security manager add an instance of this interface to the ConfigurationContext.

Author:

Lee David Painter

Method Summary

Modifier and Type	Method and Description
boolean	canConnect(SocketAddress remoteAddress, SocketAddress localAddress) Deprecated. use IPPolicy instead
boolean	canConnect(String username) Deprecated. There is no replacement for this method. Access should be denied through the authentication mechanisms installed.
boolean	canExecuteCommand(String sessionid, String username, String cmd) Deprecated. extend ShellPolicy and implement assertPermission method checking for ShellPermission.EXECUTE
boolean	canForward(String sessionid, String username, ForwardingChannel channel, boolean isLocal) Deprecated. use ForwardingPolicy instead.
boolean	canListen(String sessionid, String username, String bindAddress, int bindPort) Deprecated. use ForwardingPolicy instead.
boolean	canOpenChannel(String sessionid, String username, Channel channel) Deprecated. Use ChannelFactory instead.
boolean	canStartShell(String sessionid, String username) Deprecated. use ShellPolicy call remove(ShellPolicy.SHELL) to deny access to shell.
boolean	canStartSubsystem(String sessionid, String username, String subsystem) Deprecated. extend ShellPolicy and implement assertPermission method checking for ShellPermission.SUBSYSTEM
String[]	getRequiredAuthentications(String sessionid, String username) Deprecated. Use AuthenticationMechanismFactory getRequiredMechanisms instead.

Method Detail

canConnect

boolean canConnect(String username)

Deprecated. There is no replacement for this method. Access should be denied through the authentication mechanisms installed.

Perform an access permissions check to determine whether the user can connect to this server.

Parameters:

username -

Returns:

boolean

canConnect

boolean canConnect(SocketAddress remoteAddress,
                   SocketAddress localAddress)

Deprecated. use IPPolicy instead

Can the remote ip address connect to this server.

Parameters:

remoteAddress - SocketAddress

localAddress - SocketAddress

Returns:

boolean

canOpenChannel

boolean canOpenChannel(String sessionid,
                       String username,
                       Channel channel)

Deprecated. Use ChannelFactory instead.

Can the user open a channel. The channel is not open when this method is called and it has not been allocated a channel id. Use the channel instance to verify the type of channel and add event listeners if you wish.

Parameters:

sessionid - String

username - String

channel - Channel

Returns:

boolean

canStartShell

boolean canStartShell(String sessionid,
                      String username)

Deprecated. use ShellPolicy call remove(ShellPolicy.SHELL) to deny access to shell.

Perform an access permissions check to determine whether the user can start a shell.

Parameters:

sessionid -

username -

Returns:

boolean

canExecuteCommand

boolean canExecuteCommand(String sessionid,
                          String username,
                          String cmd)

Deprecated. extend ShellPolicy and implement assertPermission method checking for ShellPermission.EXECUTE

Perform an access permissions check to determine whether the user can execute the specified command

Parameters:

sessionid -

username -

cmd -

Returns:

boolean

canStartSubsystem

boolean canStartSubsystem(String sessionid,
                          String username,
                          String subsystem)

Deprecated. extend ShellPolicy and implement assertPermission method checking for ShellPermission.SUBSYSTEM

Perform an access permissions check to determine whether the user can start the specified subsystem

Parameters:

sessionid -

username -

subsystem -

Returns:

boolean

canForward

boolean canForward(String sessionid,
                   String username,
                   ForwardingChannel channel,
                   boolean isLocal)

Deprecated. use ForwardingPolicy instead.

Perform an access permissions check to determine whether the user can open a forwarding channel to/on the specified host:port combination

Parameters:

sessionid - the id of the users session

username - the connected user

channel - the channel instance being opened. You can get information such as address/host from this.

isLocal - true if the forwarding is local, otherwise false for remote forwarding.

Returns:

boolean

canListen

boolean canListen(String sessionid,
                  String username,
                  String bindAddress,
                  int bindPort)

Deprecated. use ForwardingPolicy instead.

Perform an access permission check to determine whether the user can open up a listening port on the server to forward remote connections to the remote client.

Parameters:

sessionid -

username -

bindAddress -

bindPort -

Returns:

boolean

getRequiredAuthentications

String[] getRequiredAuthentications(String sessionid,
                                    String username)

Deprecated. Use AuthenticationMechanismFactory getRequiredMechanisms instead.

Called by the AuthenticationProtocol to retrieve a list of required authentications for each user. If you do not want to override the settings in the ConfigurationContext then return null, otherwise return a list of the user's required authentications.

Parameters:

sessionid - String

username - String

Returns:

String[]