/*

 * Copyright (c) 2003, 2015, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

/*

 * @test

 * @bug 4924664

 * @summary Tests the use of the "jmx.remote.x.password.file" and

 *          "jmx.remote.x.access.file" environment map properties.

 * @author Luis-Miguel Alventosa

 * @run clean PasswordAccessFileTest SimpleStandard SimpleStandardMBean

 * @run build PasswordAccessFileTest SimpleStandard SimpleStandardMBean

 * @run main PasswordAccessFileTest

 */

import java.io.File;

import java.util.HashMap;

import javax.management.Attribute;

import javax.management.MBeanServer;

import javax.management.MBeanServerConnection;

import javax.management.MBeanServerFactory;

import javax.management.MBeanServerInvocationHandler;

import javax.management.Notification;

import javax.management.NotificationListener;

import javax.management.ObjectName;

import javax.management.remote.JMXConnector;

import javax.management.remote.JMXConnectorFactory;

import javax.management.remote.JMXConnectorServer;

import javax.management.remote.JMXConnectorServerFactory;

import javax.management.remote.JMXServiceURL;

public class PasswordAccessFileTest {

    public static void main(String[] args) {

        try {

            //------------------------------------------------------------------

            // SERVER

            //------------------------------------------------------------------

            // Instantiate the MBean server

            //

            System.out.println("Create the MBean server");

            MBeanServer mbs = MBeanServerFactory.createMBeanServer();

            // Create SimpleStandard MBean

            //

            ObjectName mbeanName = new ObjectName("MBeans:type=SimpleStandard");

            System.out.println("Create SimpleStandard MBean...");

            mbs.createMBean("SimpleStandard", mbeanName, null, null);

            // Server's environment map

            //

            System.out.println(">>> Initialize the server's environment map");

            HashMap sEnv = new HashMap();

            // Provide the password file used by the connector server to

            // perform user authentication. The password file is a properties

            // based text file specifying username/password pairs. This

            // properties based password authenticator has been implemented

            // using the JMXAuthenticator interface and is passed to the

            // connector through the "jmx.remote.authenticator" property

            // in the map.

            //

            // This property is implementation-dependent and might not be

            // supported by all implementations of the JMX Remote API.

            //

            sEnv.put("jmx.remote.x.password.file",

                     System.getProperty("test.src") +

                     File.separator +

                     "password.properties");

            // Provide the access level file used by the connector server to

            // perform user authorization. The access level file is a properties

            // based text file specifying username/access level pairs where

            // access level is either "readonly" or "readwrite" access to the

            // MBeanServer operations. This properties based access control

            // checker has been implemented using the MBeanServerForwarder

            // interface which wraps the real MBean server inside an access

            // controller MBean server which performs the access control checks

            // before forwarding the requests to the real MBean server.

            //

            // This property is implementation-dependent and might not be

            // supported by all implementations of the JMX Remote API.

            //

            sEnv.put("jmx.remote.x.access.file",

                     System.getProperty("test.src") +

                     File.separator +

                     "access.properties");

            // Create an RMI connector server

            //

            System.out.println("Create an RMI connector server");

            JMXServiceURL url = new JMXServiceURL("service:jmx:rmi://");

            JMXConnectorServer cs =

                JMXConnectorServerFactory.newJMXConnectorServer(url, sEnv, mbs);

            // Start the RMI connector server

            //

            System.out.println("Start the RMI connector server");

            cs.start();

            System.out.println("RMI connector server successfully started");

            System.out.println("Waiting for incoming connections...");

            //------------------------------------------------------------------

            // CLIENT : Invalid authentication credentials

            //------------------------------------------------------------------

            final String invalidCreds[][] = {

                {"admin1", "adminPassword"},

                {"admin",  "adminPassword1"},

                {"user1",  "userPassword"},

                {"user",   "userPassword1"}

            };

            // Try to connect to the server using the invalid credentials.

            // All the connect calls should get SecurityException.

            //

            for (int i = 0 ; i < invalidCreds.length ; i++) {

                // Client environment map

                //

                System.out.println(">>> Initialize the client environment map" +

                                   " for user [" +

                                   invalidCreds[i][0] +

                                   "] with password [" +

                                   invalidCreds[i][1] + "]");

                HashMap cEnv = new HashMap();

                cEnv.put("jmx.remote.credentials", invalidCreds[i]);

                // Create an RMI connector client and

                // connect it to the RMI connector server

                //

                System.out.println("Create an RMI connector client and " +

                                   "connect it to the RMI connector server");

                try {

                    JMXConnector jmxc =

                        JMXConnectorFactory.connect(cs.getAddress(), cEnv);

                } catch (SecurityException e) {

                    System.out.println("Got expected security exception: " + e);

                } catch (Exception e) {

                    System.out.println("Got unexpected exception: " + e);

                    e.printStackTrace();

                    System.exit(1);

                }

            }

            //------------------------------------------------------------------

            // CLIENT (admin)

            //------------------------------------------------------------------

            // Admin client environment map

            //

            String[] adminCreds = new String[] { "admin" , "adminPassword" };

            System.out.println(">>> Initialize the client environment map for" +

                               " user [" + adminCreds[0] + "] with " +

                               "password [" + adminCreds[1] + "]");

            HashMap adminEnv = new HashMap();

            adminEnv.put("jmx.remote.credentials", adminCreds);

            // Create an RMI connector client and

            // connect it to the RMI connector server

            //

            System.out.println("Create an RMI connector client and " +

                               "connect it to the RMI connector server");

            JMXConnector adminConnector =

                JMXConnectorFactory.connect(cs.getAddress(), adminEnv);

            // Get an MBeanServerConnection

            //

            System.out.println("Get an MBeanServerConnection");

            MBeanServerConnection adminConnection =

                adminConnector.getMBeanServerConnection();

            // Get the proxy for the Simple MBean

            //

            SimpleStandardMBean adminProxy = (SimpleStandardMBean)

                MBeanServerInvocationHandler.newProxyInstance(

                                             adminConnection,

                                             mbeanName,

                                             SimpleStandardMBean.class,

                                             false);

            // Get State attribute

            //

            System.out.println("State = " + adminProxy.getState());

            // Set State attribute

            //

            adminProxy.setState("changed state");

            // Get State attribute

            //

            System.out.println("State = " + adminProxy.getState());

            // Invoke "reset" in SimpleStandard MBean

            //

            System.out.println("Invoke reset() in SimpleStandard MBean...");

            adminProxy.reset();

            // Close MBeanServer connection

            //

            System.out.println("Close the admin connection to the server");

            adminConnector.close();

            //------------------------------------------------------------------

            // CLIENT (user)

            //------------------------------------------------------------------

            // User client environment map

            //

            String[] userCreds = new String[] { "user" , "userPassword" };

            System.out.println(">>> Initialize the client environment map for" +

                               " user [" + userCreds[0] + "] with " +

                               "password [" + userCreds[1] + "]");

            HashMap userEnv = new HashMap();

            userEnv.put("jmx.remote.credentials", userCreds);

            // Create an RMI connector client and

            // connect it to the RMI connector server

            //

            System.out.println("Create an RMI connector client and " +

                               "connect it to the RMI connector server");

            JMXConnector userConnector =

                JMXConnectorFactory.connect(cs.getAddress(), userEnv);

            // Get an MBeanServerConnection

            //

            System.out.println("Get an MBeanServerConnection");

            MBeanServerConnection userConnection =

                userConnector.getMBeanServerConnection();

            // Get the proxy for the Simple MBean

            //

            SimpleStandardMBean userProxy = (SimpleStandardMBean)

                MBeanServerInvocationHandler.newProxyInstance(

                                             userConnection,

                                             mbeanName,

                                             SimpleStandardMBean.class,

                                             false);

            // Get State attribute

            //

            System.out.println("State = " + userProxy.getState());

            // Set State attribute

            //

            try {

                userProxy.setState("changed state");

            } catch (SecurityException e) {

                System.out.println("Got expected security exception: " + e);

            } catch (Exception e) {

                System.out.println("Got unexpected exception: " + e);

                e.printStackTrace();

                System.exit(1);

            }

            // Get State attribute

            //

            System.out.println("State = " + userProxy.getState());

            // Invoke "reset" in SimpleStandard MBean

            //

            try {

                System.out.println("Invoke reset() in SimpleStandard MBean...");

                userProxy.reset();

            } catch (SecurityException e) {

                System.out.println("Got expected security exception: " + e);

            } catch (Exception e) {

                System.out.println("Got unexpected exception: " + e);

                e.printStackTrace();

                System.exit(1);

            }

            // Close MBeanServer connection

            //

            System.out.println("Close the user connection to the server");

            userConnector.close();

            //------------------------------------------------------------------

            // SERVER

            //------------------------------------------------------------------

            // Stop the connector server

            //

            System.out.println(">>> Stop the connector server");

            cs.stop();

            System.out.println("Bye! Bye!");

        } catch (Exception e) {

            System.out.println("Got unexpected exception: " + e);

            e.printStackTrace();

            System.exit(1);

        }

    }

}