From eb16b04d14b3bea6cd110f21361e049e35a37822 Mon Sep 17 00:00:00 2001
From: Andrew Branson <andrew.branson@cern.ch>
Date: Tue, 7 Oct 2014 09:17:37 +0200
Subject: Repackage to org.cristalise

---
 .../org/cristalise/lookup/ldap/LDAPLookup.java     | 753 +++++++++++++++++++++
 1 file changed, 753 insertions(+)
 create mode 100644 src/main/java/org/cristalise/lookup/ldap/LDAPLookup.java

(limited to 'src/main/java/org/cristalise/lookup/ldap/LDAPLookup.java')

diff --git a/src/main/java/org/cristalise/lookup/ldap/LDAPLookup.java b/src/main/java/org/cristalise/lookup/ldap/LDAPLookup.java
new file mode 100644
index 0000000..d954783
--- /dev/null
+++ b/src/main/java/org/cristalise/lookup/ldap/LDAPLookup.java
@@ -0,0 +1,753 @@
+/*
+ * Directory Lookup Service *
+ * author: Florida Estrella
+*/
+
+package org.cristalise.lookup.ldap;
+
+import java.security.NoSuchAlgorithmException;
+import java.util.ArrayList;
+import java.util.Iterator;
+import java.util.StringTokenizer;
+
+import org.cristalise.kernel.common.ObjectAlreadyExistsException;
+import org.cristalise.kernel.common.ObjectCannotBeUpdated;
+import org.cristalise.kernel.common.ObjectNotFoundException;
+import org.cristalise.kernel.entity.proxy.ProxyMessage;
+import org.cristalise.kernel.lookup.AgentPath;
+import org.cristalise.kernel.lookup.DomainPath;
+import org.cristalise.kernel.lookup.InvalidItemPathException;
+import org.cristalise.kernel.lookup.ItemPath;
+import org.cristalise.kernel.lookup.LookupManager;
+import org.cristalise.kernel.lookup.Path;
+import org.cristalise.kernel.lookup.RolePath;
+import org.cristalise.kernel.process.Gateway;
+import org.cristalise.kernel.process.auth.Authenticator;
+import org.cristalise.kernel.property.Property;
+import org.cristalise.kernel.property.PropertyDescription;
+import org.cristalise.kernel.property.PropertyDescriptionList;
+import org.cristalise.kernel.utils.Logger;
+import org.omg.CORBA.Object;
+
+import com.novell.ldap.LDAPAttribute;
+import com.novell.ldap.LDAPAttributeSet;
+import com.novell.ldap.LDAPConnection;
+import com.novell.ldap.LDAPEntry;
+import com.novell.ldap.LDAPException;
+import com.novell.ldap.LDAPSearchConstraints;
+import com.novell.ldap.LDAPSearchResults;
+
+/**
+ * The LDAPLookup object, statically accessible through the Gateway, manages
+ * the LDAP connection for the cristal process. It provides:
+ * <ul>
+ * <li>Authentication - returning an AgentProxy object if a user has logged in
+ * <li>System key generation - through the NextKeyManager
+ * <li>Agent and Role lookup/modification - through the RoleManager
+ * <li>
+ * @version $Revision: 1.113 $ $Date: 2006/03/03 13:52:21 $
+ * @author  $Author: abranson $
+ */
+
+public class LDAPLookup implements LookupManager{
+	
+	protected LDAPAuthManager mLDAPAuth;
+	protected LDAPPropertyManager mPropManager;
+	protected LDAPProperties ldapProps;
+
+    private String mGlobalPath, mRootPath, mLocalPath, mRolePath, mItemTypeRoot, mDomainTypeRoot;
+
+    /**
+     * 
+     */
+    public LDAPLookup() {
+    	super();
+    }
+    
+    /**
+     * Initializes the DN paths from the Root, global and local paths supplied by the LDAP properties.
+     * @param props
+     */
+    protected void initPaths(LDAPProperties props){
+    	
+        Logger.msg(8,"LDAPLookup.initPaths(): - initialising with LDAPProperties");
+        ldapProps = props;
+
+        mGlobalPath=props.mGlobalPath;
+        mRootPath=props.mRootPath;
+        mLocalPath=props.mLocalPath;
+
+        mItemTypeRoot = "cn=entity,"+props.mLocalPath;
+        mDomainTypeRoot = "cn=domain,"+props.mLocalPath;
+        mRolePath = "cn=agent,"+mDomainTypeRoot; 
+    }
+    
+    /**
+     * Initializes the LDAPLookup manager with the Gateway properties.
+     * This should be only done by the Gateway during initialisation.
+     *
+     * @param auth A LDAPAuthManager authenticator
+     */
+    @Override
+	public void open(Authenticator auth) {
+    	if (ldapProps == null)
+    		initPaths(new LDAPProperties(Gateway.getProperties()));
+        
+    	mLDAPAuth = (LDAPAuthManager)auth;
+      	mPropManager = new LDAPPropertyManager(this, mLDAPAuth);
+    }
+
+    /**
+     * Gets the property manager, that is used to read and write cristal properties to the LDAP store.
+     * @return Returns the global LDAPPropertyManager.
+     */
+    public LDAPPropertyManager getPropManager() {
+        return mPropManager;
+    }
+
+    /**
+     * Disconnects the connection with the LDAP server during shutdown
+     */
+	@Override
+	public void close() {
+        Logger.msg(1, "LDAP Lookup: Shutting down LDAP connection.");
+        if (mLDAPAuth != null) {
+           	mLDAPAuth.disconnect();
+            mLDAPAuth = null;
+        }
+    }
+
+   /**
+    * Attempts to resolve the CORBA object for a Path, either directly or through an alias.
+    * @param path the path to resolve
+    * @return the CORBA object
+    * @throws ObjectNotFoundException When the path does not exist
+    */
+    public org.omg.CORBA.Object getIOR(Path path)
+    throws ObjectNotFoundException
+    {
+        return resolveObject(getFullDN(path));
+    }
+
+    /**
+     * Attempts to resolve the CORBA object from the IOR attribute of a DN, either directly or through an alias
+     * @param dn The String dn
+     * @throws ObjectNotFoundException when the dn or aliased dn does not exist
+     */
+    private org.omg.CORBA.Object resolveObject(String dn)
+        throws ObjectNotFoundException
+    {
+        Logger.msg(8,"LDAPLookup.resolveObject("+dn+")");
+        LDAPEntry anEntry = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(),dn,LDAPSearchConstraints.DEREF_NEVER);
+        if (anEntry != null)
+        {
+            String iorString;
+            try {
+                iorString = LDAPLookupUtils.getFirstAttributeValue(anEntry, "ior");
+                org.omg.CORBA.Object ior=Gateway.getORB().string_to_object(iorString);
+                if (ior!=null)
+                    return ior;
+                else
+                    throw new ObjectNotFoundException("LDAPLookup.resolveObject() - " + dn + " has no IOR");
+            } catch (ObjectNotFoundException ex) {
+                return resolveObject(LDAPLookupUtils.getFirstAttributeValue(anEntry,"aliasedObjectName"));
+            }
+        }
+        else
+            throw new ObjectNotFoundException("LDAPLookup.resolveObject() LDAP node " + dn + " is not in LDAP or has no IOR.");
+    }
+
+    /**
+     *
+     * @param domPath
+     * @return
+     * @throws InvalidItemPathException
+     * @throws ObjectNotFoundException
+     */
+    @Override
+	public ItemPath resolvePath(DomainPath domPath)
+        throws InvalidItemPathException, ObjectNotFoundException {
+
+        LDAPEntry domEntry = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(), 
+                getFullDN(domPath), LDAPSearchConstraints.DEREF_ALWAYS);
+        String entityKey = LDAPLookupUtils.getFirstAttributeValue(domEntry,
+                "cn");
+        Logger.msg(7, "DomainPath " + domPath + " is a reference to "
+                + entityKey);
+        String objClass = LDAPLookupUtils.getFirstAttributeValue(domEntry,
+                "objectClass");
+    	ItemPath referencedPath = new ItemPath(entityKey);
+        if (objClass.equals("cristalagent"))
+            return new AgentPath(referencedPath);
+
+        return referencedPath;
+    }
+
+
+    @Override
+	public void add(Path path)
+        throws ObjectCannotBeUpdated, ObjectAlreadyExistsException
+    {
+        try {
+            checkLDAPContext(path);
+            LDAPAttributeSet attrSet = createAttributeSet(path);
+            LDAPEntry newEntry = new LDAPEntry(getFullDN(path),attrSet);
+            LDAPLookupUtils.addEntry(mLDAPAuth.getAuthObject(),newEntry);
+            if (path instanceof DomainPath)
+            	Gateway.getProxyServer().sendProxyEvent(new ProxyMessage(null, path.toString(), ProxyMessage.ADDED));
+        } catch (LDAPException ex) {
+            if (ex.getResultCode() == LDAPException.ENTRY_ALREADY_EXISTS)
+                throw new ObjectAlreadyExistsException(ex.getLDAPErrorMessage());
+            else
+                throw new ObjectCannotBeUpdated(ex.getLDAPErrorMessage());
+        }
+     }
+
+    //deletes a node
+    //throws LDAPexception if node cannot be deleted (eg node is not a leaf)
+    @Override
+	public void delete(Path path) throws ObjectCannotBeUpdated
+    {
+        try {
+            LDAPLookupUtils.delete(mLDAPAuth.getAuthObject(),getDN(path)+mLocalPath);
+        } catch (LDAPException ex) {
+            throw new ObjectCannotBeUpdated(ex.getLDAPErrorMessage());
+        }
+        if (path instanceof DomainPath) {
+        	Gateway.getProxyServer().sendProxyEvent(new ProxyMessage(null, path.toString(), ProxyMessage.DELETED));
+        }
+    }
+
+	//change specs, add boolean alias leaf context
+    protected void checkLDAPContext(Path path)
+    {
+        String dn = getFullDN(path);
+        if (!LDAPLookupUtils.exists(mLDAPAuth.getAuthObject(),dn))
+        {
+            String listDN[] = path.getPath();
+            String name = "cn="+ path.getRoot() + "," + mLocalPath;
+            int i=0;
+            while (i<listDN.length-1)
+            {
+                name= "cn="+LDAPLookupUtils.escapeDN(listDN[i])+","+name;
+                if (!LDAPLookupUtils.exists(mLDAPAuth.getAuthObject(),name))
+                {
+                    try
+                    {
+                        //create cristalcontext
+                        Logger.msg(8,"LDAPLookup::addLDAPContext() context added " + name);
+                        LDAPLookupUtils.createCristalContext(mLDAPAuth.getAuthObject(), name);
+                    }
+                    catch (Exception ex)
+                    {
+                        Logger.error("LDAPLookup::addContext() " + ex);
+                    }
+                }
+                i++;
+            }
+        }
+    }
+    public void createBootTree()
+    {
+        Logger.msg(8,"Initializing LDAP Boot tree");
+
+        //create org
+        LDAPLookupUtils.createOrganizationContext(mLDAPAuth.getAuthObject(), mGlobalPath);
+        //create root
+        LDAPLookupUtils.createCristalContext(mLDAPAuth.getAuthObject(), mRootPath);
+        //create local
+        LDAPLookupUtils.createCristalContext(mLDAPAuth.getAuthObject(), mLocalPath);
+    }
+
+    @Override
+	public void initializeDirectory() throws ObjectNotFoundException
+    {
+        createBootTree();
+        initTree( Gateway.getResource().getTextResource("ldap", "LDAPboot.txt"));
+    }
+
+    public void initTree(String bootFile)
+    {
+        Logger.msg(8,"Verifying Cristal LDAP roots");
+        StringTokenizer strTokenizer = new StringTokenizer(bootFile, "\n\r");
+        while (strTokenizer.hasMoreTokens())
+        {
+            String line = strTokenizer.nextToken();
+            Logger.msg(8,"Checking " + line+mLocalPath);
+            LDAPLookupUtils.createCristalContext(mLDAPAuth.getAuthObject(), line+mLocalPath);
+        }
+
+    }
+
+ 	//typically search for cn=barcode
+    @Override
+	public LDAPPathSet search(Path start, String filter)
+    {
+    	Logger.msg(8,"LDAPLookup::search() From " + getDN(start) + " for cn=" + filter );
+        return search(getFullDN(start),"cn="+LDAPLookupUtils.escapeSearchFilter(filter));
+    }
+    
+    @Override
+	public LDAPPathSet search(Path start, Property... props)
+    {
+    	StringBuffer filter = new StringBuffer();
+    	int propCount = 0;
+    	for (Property prop: props) {
+    		filter.append("(cristalprop="+LDAPLookupUtils.escapeSearchFilter((prop.isMutable()?"":"!")+prop.getName()+
+    				":"+prop.getValue())+")");
+    		propCount++;
+    	}
+    	
+    	String filterParam;
+    	if (propCount == 0)
+    		filterParam = "";
+    	else if (propCount == 1)
+    		filterParam = filter.toString();
+    	else
+    		filterParam = "(&"+filter.toString()+")";
+    	
+        LDAPSearchConstraints searchCons = new LDAPSearchConstraints();
+        searchCons.setBatchSize(0);
+        searchCons.setDereference(LDAPSearchConstraints.DEREF_SEARCHING);
+        return search(getFullDN(start),LDAPConnection.SCOPE_SUB,filterParam,searchCons);
+    }
+    
+    @Override
+	public LDAPPathSet search(Path start, PropertyDescriptionList props) {
+
+    	ArrayList<Property> params = new ArrayList<Property>();
+    	for (PropertyDescription propDesc: props.list) {
+    		if (propDesc.getIsClassIdentifier())
+    			params.add(propDesc.getProperty());
+    	}
+    	return search(start, params.toArray(new Property[params.size()]));
+    }
+    
+    protected LDAPPathSet search(String startDN, int scope, String filter, LDAPSearchConstraints searchCons)
+    {
+        Logger.msg(8,"Searching for "+filter+" in "+startDN);
+        searchCons.setMaxResults(0);
+        String[] attr = { LDAPConnection.ALL_USER_ATTRS };
+        try
+        {
+            LDAPSearchResults res = mLDAPAuth.getAuthObject().search(startDN, scope,
+            		filter,attr,false,searchCons);
+            return new LDAPPathSet(res, this);
+        }
+        catch (LDAPException ex)
+        {
+            Logger.error("LDAPException::LDAPLookup::search() " + ex.toString());
+            return new LDAPPathSet(this);
+        }
+    }
+    //typically search for (any filter combination)
+    public LDAPPathSet search(String startDN,String filter)
+    {
+        LDAPSearchConstraints searchCons = new LDAPSearchConstraints();
+        searchCons.setBatchSize(0);
+        searchCons.setDereference(LDAPSearchConstraints.DEREF_NEVER);
+        return search(startDN,LDAPConnection.SCOPE_SUB,filter,searchCons);
+    }
+    
+    @Override
+	public LDAPPathSet searchAliases(ItemPath entity) {
+        LDAPSearchConstraints searchCons = new LDAPSearchConstraints();
+        searchCons.setBatchSize(0);
+        searchCons.setDereference(LDAPSearchConstraints.DEREF_NEVER);
+        return search(getFullDN(new DomainPath()), LDAPConnection.SCOPE_SUB, "(&(objectClass=aliasObject)(aliasedObjectName="+
+        LDAPLookupUtils.escapeDN(getFullDN(entity))+"))", searchCons);
+    }
+
+    @Override
+	public boolean exists(Path path) {
+        return LDAPLookupUtils.exists(mLDAPAuth.getAuthObject(), getFullDN(path));
+    }
+
+    @Override
+	public ItemPath getItemPath(String uuid) throws ObjectNotFoundException, InvalidItemPathException {
+        String[] attr = { LDAPConnection.ALL_USER_ATTRS };
+        try {
+        	ItemPath item = new ItemPath(uuid);
+            LDAPEntry anEntry=mLDAPAuth.getAuthObject().read(getDN(item)+mLocalPath,attr);
+            String type = LDAPLookupUtils.getFirstAttributeValue(anEntry, "objectClass");
+            if (type.equals("cristalentity"))
+                return item;
+            else if (type.equals("cristalagent"))
+                return new AgentPath(item);
+            else
+                throw new ObjectNotFoundException("Not an entity");
+
+        } catch (LDAPException ex) {
+            if (ex.getResultCode() == LDAPException.NO_SUCH_OBJECT)
+                throw new ObjectNotFoundException("Entity does not exist");
+            Logger.error(ex);
+            throw new ObjectNotFoundException("Error getting entity class");
+        }
+    }
+
+    /** converts an LDAPentry to a Path object
+     *  Note that the search producing the entry should have retrieved the attrs
+     *  'ior' and 'uniquemember'
+     * @throws ObjectNotFoundException
+     * @throws ObjectNotFoundException
+     * @throws  
+     */
+    protected Path nodeToPath(LDAPEntry entry) throws InvalidItemPathException, ObjectNotFoundException
+    {
+        String dn = entry.getDN();
+        ItemPath entityKey;
+        org.omg.CORBA.Object ior;
+
+        // extract syskey
+        try {
+        	String entityKeyStr = LDAPLookupUtils.getFirstAttributeValue(entry, "cn");
+        	entityKey = new ItemPath(entityKeyStr);
+        } catch (ObjectNotFoundException ex) { 
+        	entityKey = null;
+        } catch (InvalidItemPathException ex) { 
+        	entityKey = null;
+        }
+
+        // extract IOR
+        try {
+        	String stringIOR = LDAPLookupUtils.getFirstAttributeValue(entry,"ior");
+        	ior = Gateway.getORB().string_to_object(stringIOR);
+        } catch (ObjectNotFoundException ex) { 
+        	ior = null;
+        }
+        
+        /* Find the right path class */
+        Path thisPath;
+        if (LDAPLookupUtils.existsAttributeValue(entry,"objectclass","cristalagent"))
+        { //cristalagent
+            String agentID = LDAPLookupUtils.getFirstAttributeValue(entry,"uid");
+            thisPath = new AgentPath(entityKey, agentID);
+        }
+        else if (LDAPLookupUtils.existsAttributeValue(entry,"objectclass","cristalrole"))
+        { //cristalrole
+            thisPath = new RolePath(getPathComponents(dn.substring(0, dn.lastIndexOf(mDomainTypeRoot))),
+                    LDAPLookupUtils.getFirstAttributeValue(entry, "jobList").equals("TRUE"));
+        }
+        else if (LDAPLookupUtils.existsAttributeValue(entry,"objectclass","aliasObject") ||
+                (LDAPLookupUtils.existsAttributeValue(entry,"objectclass","cristalcontext") && dn.endsWith(mDomainTypeRoot)))
+        {
+            DomainPath domainPath = new DomainPath();
+            domainPath.setPath(getPathComponents(dn.substring(0, dn.lastIndexOf(mDomainTypeRoot))));
+            thisPath = domainPath;
+        }
+        else if (LDAPLookupUtils.existsAttributeValue(entry,"objectclass","cristalentity") ||
+                (LDAPLookupUtils.existsAttributeValue(entry,"objectclass","cristalcontext") && dn.endsWith(mItemTypeRoot)))
+        {
+            if(dn.endsWith(mItemTypeRoot)) {
+            	if (entityKey == null) throw new InvalidItemPathException(entry.getDN()+" was not a valid itemPath");
+                thisPath = entityKey;
+            }
+            else
+                throw new ObjectNotFoundException("Entity found outside entity tree");
+        }
+        else
+        {
+			throw new ObjectNotFoundException("Unrecognised LDAP entry. Not a cristal entry");
+        }
+
+        //set IOR if we have one
+        if (ior!=null) thisPath.setIOR(ior);
+        return thisPath;
+    }
+
+	public String getDN(Path path) {
+            StringBuffer dnBuffer = new StringBuffer();
+            String[] pathComp = path.getPath();
+            for (int i=pathComp.length-1; i>=0; i--)
+                dnBuffer.append("cn=").append(LDAPLookupUtils.escapeDN(pathComp[i])).append(",");
+            dnBuffer.append("cn="+path.getRoot()+",");
+            return dnBuffer.toString();
+    }
+
+    public String getFullDN(Path path) {
+        return getDN(path)+mLocalPath;
+    }
+    
+    public String[] getPathComponents(String dnFragment) {
+    	ArrayList<String> newPath = new ArrayList<String>();
+        StringTokenizer tok = new StringTokenizer(dnFragment, ",");
+        String[] path = new String[tok.countTokens()];
+        while (tok.hasMoreTokens()) {
+            String nextPath = tok.nextToken();
+            if (nextPath.indexOf("cn=") == 0)
+                newPath.add(0, LDAPLookupUtils.unescapeDN(nextPath.substring(3)));
+            else
+                break;
+        }
+        return newPath.toArray(path);
+    }
+
+	@Override
+	public Object resolve(Path path) throws ObjectNotFoundException {
+		return resolveObject(getFullDN(path));
+	}
+
+	@Override
+	public Iterator<Path> getChildren(Path path) {
+        String filter = "objectclass=*";
+        LDAPSearchConstraints searchCons = new LDAPSearchConstraints();
+        searchCons.setBatchSize(10);
+        searchCons.setDereference(LDAPSearchConstraints.DEREF_FINDING );
+        return search(getFullDN(path), LDAPConnection.SCOPE_ONE,filter,searchCons);
+	}    
+	
+	protected LDAPAttributeSet createAttributeSet(Path path) throws ObjectCannotBeUpdated {
+        LDAPAttributeSet attrs = new LDAPAttributeSet();
+		
+		if (path instanceof RolePath) {
+			RolePath rolePath = (RolePath)path;
+	        attrs.add(new LDAPAttribute("objectclass","cristalrole"));
+	        String jobListString = rolePath.hasJobList()?"TRUE":"FALSE";
+	        attrs.add(new LDAPAttribute("jobList",jobListString));
+	        attrs.add(new LDAPAttribute("cn", rolePath.getName()));
+		}
+		else if (path instanceof DomainPath) {
+			DomainPath domPath = (DomainPath)path;
+	        attrs.add(new LDAPAttribute("cn",domPath.getName()));
+            try {
+				attrs.add(new LDAPAttribute("aliasedObjectName",getFullDN(domPath.getItemPath())));
+	            String objectclass_values[] = { "alias", "aliasObject" };
+	            attrs.add(new LDAPAttribute("objectclass",objectclass_values));
+			} catch (ObjectNotFoundException e) { // no entity - is a context
+				attrs.add(new LDAPAttribute("objectclass","cristalcontext"));
+			}
+		}
+		
+		else if (path instanceof ItemPath) {
+			ItemPath itemPath = (ItemPath)path;
+	        attrs.add(new LDAPAttribute("cn", itemPath.getUUID().toString()));
+	        if (itemPath.getIOR() != null)
+	            attrs.add(new LDAPAttribute("ior", Gateway.getORB().object_to_string(itemPath.getIOR())));
+		
+	        if (path instanceof AgentPath) {
+	        	AgentPath agentPath = (AgentPath)path;
+	        	attrs.add(new LDAPAttribute("objectclass","cristalagent"));
+
+	        	String agentName = agentPath.getAgentName();
+	        	if (agentName != null && agentName.length() > 0)
+	        		attrs.add(new LDAPAttribute("uid", agentName));
+	        	else
+	        		throw new ObjectCannotBeUpdated("Cannot create agent. No userId specified");
+
+	        	String agentPass = agentPath.getPassword();
+	        	if (agentPass != null && agentPass.length() > 0)
+	        		try {
+	        			attrs.add(new LDAPAttribute("userPassword", AgentPath.generateUserPassword(agentPass, "SHA")));
+	        		} catch (NoSuchAlgorithmException ex) {
+	        			throw new ObjectCannotBeUpdated("Cryptographic libraries for password hashing not found.");
+	        		}
+	        	else
+	        		throw new ObjectCannotBeUpdated("Cannot create agent. No password given");
+	        }
+	        else {
+	        	attrs.add(new LDAPAttribute("objectclass","cristalentity"));
+	        }
+		}
+
+        return attrs;
+
+	}
+	
+    //Creates a cristalRole
+    //CristalRole is-a specialized CristalContext which contains multi-valued uniqueMember attribute pointing to cristalagents
+    @Override
+	public RolePath createRole(RolePath rolePath)
+        throws ObjectAlreadyExistsException, ObjectCannotBeUpdated
+    {
+
+        // create the role
+    	String roleDN = getFullDN(rolePath);
+        LDAPEntry roleNode;
+        try
+        {
+        	roleNode = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(), getFullDN(rolePath));
+            throw new ObjectAlreadyExistsException();
+        } catch (ObjectNotFoundException ex) { }
+
+        //create CristalRole if it does not exist
+        roleNode = new LDAPEntry(roleDN, createAttributeSet(rolePath));
+        try {
+            LDAPLookupUtils.addEntry(mLDAPAuth.getAuthObject(),roleNode);
+        } catch (LDAPException e) {
+            throw new ObjectCannotBeUpdated(e.getLDAPErrorMessage());
+        }
+        return rolePath;
+
+
+    }
+    public void deleteRole(RolePath role) throws ObjectNotFoundException, ObjectCannotBeUpdated {
+        try {
+            LDAPLookupUtils.delete(mLDAPAuth.getAuthObject(), getFullDN(role));
+        } catch (LDAPException ex) {
+            throw new ObjectCannotBeUpdated("Could not remove role");
+        }
+    }
+
+    @Override
+	public void addRole(AgentPath agent, RolePath role)
+            throws ObjectCannotBeUpdated, ObjectNotFoundException
+    {
+        LDAPEntry roleEntry = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(), getFullDN(role));
+        //add memberDN to uniqueMember if it is not yet a member
+        if (!LDAPLookupUtils.existsAttributeValue(roleEntry, "uniqueMember", getFullDN(agent)))
+            LDAPLookupUtils.addAttributeValue(mLDAPAuth.getAuthObject(), roleEntry, "uniqueMember", getFullDN(agent));
+        else
+            throw new ObjectCannotBeUpdated("Agent " + agent.getAgentName() + " already has role " + role.getName());
+    }
+
+    @Override
+	public void removeRole(AgentPath agent, RolePath role)
+        throws ObjectCannotBeUpdated, ObjectNotFoundException
+    {
+    	LDAPEntry roleEntry = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(), getFullDN(role));
+    	if (LDAPLookupUtils.existsAttributeValue(roleEntry, "uniqueMember", getFullDN(agent)))
+   			LDAPLookupUtils.removeAttributeValue(mLDAPAuth.getAuthObject(), roleEntry, "uniqueMember", getFullDN(agent));
+    	else
+    		throw new ObjectCannotBeUpdated("Agent did not have that role");
+    }
+
+    @Override
+	public boolean hasRole(AgentPath agent, RolePath role) {
+        String filter = "(&(objectclass=cristalrole)(uniqueMember="+getFullDN(agent)+")(cn="+role.getName()+"))";
+        LDAPSearchConstraints searchCons = new LDAPSearchConstraints();
+        searchCons.setBatchSize(0);
+        searchCons.setDereference(LDAPSearchConstraints.DEREF_NEVER );
+        return search(mRolePath,LDAPConnection.SCOPE_SUB,filter,searchCons).hasNext();
+    }
+
+    @Override
+	public AgentPath[] getAgents(RolePath role)
+        throws ObjectNotFoundException
+    {
+    	//get the roleDN entry, and its uniqueMember entry pointing to
+    	LDAPEntry roleEntry;
+        try {
+            roleEntry = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(), getFullDN(role));
+        } catch (ObjectNotFoundException e) {
+            throw new ObjectNotFoundException("Role does not exist");
+        }
+
+    	String[] res = LDAPLookupUtils.getAllAttributeValues(roleEntry,"uniqueMember");
+    	ArrayList<AgentPath> agents = new ArrayList<AgentPath>();
+    	for (String userDN : res) {
+    		try {
+    			LDAPEntry userEntry = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(), userDN);
+    		    AgentPath path = (AgentPath)nodeToPath(userEntry);
+                agents.add(path);
+    		} catch (ObjectNotFoundException ex) {
+                Logger.error("Agent "+userDN+" does not exist");
+    		} catch (InvalidItemPathException ex) {
+                Logger.error("Agent "+userDN+" is not a valid entity");
+    		}
+    	}
+        AgentPath[] usersList = new AgentPath[0];
+        usersList = agents.toArray(usersList);
+    	return usersList;
+    }
+
+    //returns the role/s of a user
+    @Override
+	public RolePath[] getRoles(AgentPath agentPath)
+    {
+    	//search the mDomainPath tree uniqueMember=userDN
+    	//filter = objectclass=cristalrole AND uniqueMember=userDN
+        String filter = "(&(objectclass=cristalrole)(uniqueMember="+getFullDN(agentPath)+"))";
+        LDAPSearchConstraints searchCons = new LDAPSearchConstraints();
+        searchCons.setBatchSize(0);
+        searchCons.setDereference(LDAPSearchConstraints.DEREF_NEVER );
+    	Iterator<?> roles = search(mRolePath,LDAPConnection.SCOPE_SUB,filter,searchCons);
+        ArrayList<RolePath> roleList = new ArrayList<RolePath>();
+
+    	while(roles.hasNext())
+    	{
+            RolePath path = (RolePath) roles.next();
+   			roleList.add(path);
+    	}
+        RolePath[] roleArr = new RolePath[roleList.size()];
+        roleArr = roleList.toArray(roleArr);
+        return roleArr;
+    }
+
+    /**
+     * Utility for looking up a login name
+     *
+     * @param ld
+     * @param agentName
+     * @param baseDN
+     * @return
+     * @throws ObjectNotFoundException
+     */
+    @Override
+	public AgentPath getAgentPath(String agentName) throws ObjectNotFoundException
+    {
+        //search to get the userDN equivalent of the userID
+        LDAPSearchConstraints searchCons = new LDAPSearchConstraints();
+        searchCons.setBatchSize(0);
+        searchCons.setDereference(LDAPSearchConstraints.DEREF_NEVER );
+        String filter = "(&(objectclass=cristalagent)(uid="+agentName+"))";
+        Iterator<Path> res = search(mItemTypeRoot,LDAPConnection.SCOPE_SUB,filter,searchCons);
+        if (!res.hasNext())
+            throw new ObjectNotFoundException("Agent not found: "+agentName);
+        Path result = res.next();
+        if (result instanceof AgentPath)
+            return (AgentPath)result;
+        else
+            throw new ObjectNotFoundException("Entry was not an Agent");
+    }
+
+    @Override
+	public RolePath getRolePath(String roleName) throws ObjectNotFoundException
+    {
+        LDAPSearchConstraints searchCons = new LDAPSearchConstraints();
+        searchCons.setBatchSize(0);
+        searchCons.setDereference(LDAPSearchConstraints.DEREF_NEVER );
+        String filter = "(&(objectclass=cristalrole)(cn="+roleName+"))";
+		Iterator<Path> res = search(mRolePath,LDAPConnection.SCOPE_SUB,filter,searchCons);
+		if (!res.hasNext())
+            throw new ObjectNotFoundException("Role not found");
+        Path result = res.next();
+        if (result instanceof RolePath)
+            return (RolePath)result;
+        else
+            throw new ObjectNotFoundException("Entry was not a Role");
+    }
+
+	@Override
+	public void setHasJobList(RolePath role, boolean hasJobList) throws ObjectNotFoundException, ObjectCannotBeUpdated {
+		// get entry
+		LDAPEntry roleEntry;
+        try {
+            roleEntry = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(), getFullDN(role));
+        } catch (ObjectNotFoundException e) {
+            throw new ObjectNotFoundException("Role does not exist");
+        }
+		// set attribute
+        LDAPLookupUtils.setAttributeValue(mLDAPAuth.getAuthObject(), roleEntry, "jobList", hasJobList?"TRUE":"FALSE");
+	}
+	
+	@Override
+	public void setAgentPassword(AgentPath agent, String newPassword) throws ObjectNotFoundException, ObjectCannotBeUpdated, NoSuchAlgorithmException {
+		String encPasswd = AgentPath.generateUserPassword(newPassword, "SHA");
+		LDAPEntry agentEntry;
+        try {
+        	agentEntry = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(), getFullDN(agent));
+        } catch (ObjectNotFoundException e) {
+            throw new ObjectNotFoundException("Agent "+agent.getAgentName()+" does not exist");
+        }
+		LDAPLookupUtils.setAttributeValue(mLDAPAuth.getAuthObject(), agentEntry, "userPassword", encPasswd);
+		
+	}
+
+	@Override
+	public String getAgentName(AgentPath agentPath)
+			throws ObjectNotFoundException {
+        LDAPEntry agentEntry = LDAPLookupUtils.getEntry(mLDAPAuth.getAuthObject(), getFullDN(agentPath));
+        return LDAPLookupUtils.getFirstAttributeValue(agentEntry,"uid");
+	}
+
+}
-- 
cgit v1.2.3