Authentication token that wraps an externally authenticated principal to return.

Authenticate the given credentials using the given manager name.

Check if the user is authorized to perform the given operation on the given resource.

authorize the user associated with the given authToken for a given operation with the given authorization manager name

Authorize the user against the specified realm.

Create a new sub-CA IMMEDIATELY beneath this one.

Handles end-user request submission.

Authenticates user by their CMC; resulting AuthToken sets a TOKEN_SUBJECT for the subject name.

Authenticates user through LDAP by a set of credentials.

Authenticates a user based on uid, pwd in the directory.

authenticates user by certificate

User-signed CMC requests can be signed in two ways: a.

getSharedToken(String identification, IAuthToken authToken) provides support for id_cmc_identification shared secret based enrollment

check the authorization permission for the user associated with authToken on operation Example: For example, if UsrGrpAdminServlet needs to authorize the caller it would do be done in the following fashion: try { authzTok = mAuthz.authorize( "DirAclAuthz", authToken, RES_GROUP, "read"); } catch (EBaseException e) { log(ILogger.LL_FAILURE, "authorize call: " + e.toString()); }

throw EACLsException if a deny entry is matched

Gets the IP address from session context

Evaluates the user in AuthToken to see if it's equal to value

Authentication

Process the HTTP request

Process request

Gets info for a specific request

fill subject name, validity, extensions from authoken if any, overriding what was in pkcs10.

Generate a String Vector containing all the email addresses found in this Authentication token