OpenSSO Custom Auth Module

Author:		Jeff Nester
Email:		Jeff.Nester@sun.com
Purpose:		To demonstrator how to write and deploy a custom authentication module in Open SSO 8.0
Notes:		This login module determines the username by extracting it from the Servlet Request userName parameter. This module does not require a password. The original purpose of this example was to create an authentication module that would extract a header variable passed in by the network router. The user was validated by the router and an attributed placed in the request header. Since this user cleared the router the user is considered valid and the module authenticates the user to OpenSSO. Since it is more difficult to demonstrate a header variable being passing in, I changed the module to use a parameter instead. The url to log in would look like: http://sso.sun.com/opensso/UI/Login?module=getP&userName=Jeff

Instructions:

NOTE: This assumes that the famAdminTools have been configured.

Untar the getP_Provider.tar file to a know location
cd getP_Provider
modify the setup.sh shell script by changing the the export lines in the script to point to your specific locations:

    # PASSWORD_FILE points to a file that contains the amadmin password
    export PASSWORD_FILE=/password

    # OPENSSO_DIR is the location where the opensso.zip file was unzipped
    export OPENSSO_DIR=/opensso

    # Set the GLASSFISH_BASE to the location of your GlassFish install folder
    export GLASSFISH_BASE=/glassfish

    # Set JAVA_HOME to be your JAVA Home
    export JAVA_HOME=/usr/jdk/instances/jdk1.5.0
./install
Test it out by going to http://yourserver.domain.com/opensso/UI/Login?module=getP&userName=amadmin

Instructions for configuring famAdminTools:

The famAdminTools are configured by doing the following:

locate the famAdminTools.zip file. This should be in the folder where the opensso.zip was unzipped. If you unzipped it to /opensso then go to /opensso/tools.
export JAVA_HOME=/usr/jdk/{your java}
./setup

Files List:

amAuthGetP.properties	-	international definitions
getP.java	-	java code that defines the authentication module
getPPrincipal.java	-	java code that defines the Principal object needed
getPService.xml	-	This file defines the service that has to be added to OpenSSO for the new module
getP.xml	-	an empty file that the login module uses to NOT do call backs
install.sh	-	shell script to compile and deploy the module
remove.sh	-	shell script to remove the module
setup.sh	-	shell script to set the necessary variables for the other scripts to run. This one needs to be modified before executing install.sh or remove.sh
Makefile	-	Make file to compile the code