source: EDIS/tags/ed/tracking-weblogic-ssl/src/main/java/gov/va/med/edp/weblogic/EDPUserNameMapper.java@ 1240

package gov.va.med.edp.weblogic;


import java.security.cert.X509Certificate;

import org.apache.log4j.Logger;

import weblogic.security.providers.authentication.UserNameMapper;

public class EDPUserNameMapper implements UserNameMapper {

                                                                                                  
    private static Logger logger = Logger.getLogger(EDPUserNameMapper.class);

        public String mapCertificateToUserName(X509Certificate[] certs, boolean ssl) {
                String machineName = "";

                
                if (certs.length > 0) {
                        String dn = certs[0].getSubjectDN().getName();
                        if (logger.isDebugEnabled()){
                                logger.debug("Certificate Contents: " + dn);
                        }
                        String[] parts = dn.split(",");
                        for (int i = 0; i < parts.length; i++) {
                                String dName = parts[i];
                                if (dName.indexOf("CN=") != -1){
                                        machineName = dName.trim().substring(3);
                                }

                                if (machineName.length() == 0){
                                        throw new IllegalStateException("Machine Name obtained from the client SSL Certificate is not valid. The machine name was empty");
                                }

                                WeblogicUserManager.addUserToWeblogicSecurity(machineName);

                                if (logger.isDebugEnabled()){
                                        logger.debug("SUCCESS!!...Returning Machine Name: '" + machineName + "' for Weblogic Security");
                                }
                                
                                return machineName;
                        }
                                
                }
                return "INVALID_USER";
        }
        

        public String mapDistinguishedNameToUserName(byte[] arg0) {
                throw new UnsupportedOperationException("The method 'mapDistinguishedNameToUserName' in class " + getClass().getName() + " is not supported");
        }

        

        
        
}