Return-Path: 
 <dev-return-17737-apmail-mina-dev-archive=mina.apache.org@mina.apache.org>
Delivered-To: apmail-mina-dev-archive@www.apache.org
Received: (qmail 47355 invoked from network); 13 Nov 2009 17:09:03 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 13 Nov 2009 17:09:03 -0000
Received: (qmail 92569 invoked by uid 500); 13 Nov 2009 17:09:03 -0000
Delivered-To: apmail-mina-dev-archive@mina.apache.org
Received: (qmail 92509 invoked by uid 500); 13 Nov 2009 17:09:03 -0000
Mailing-List: contact dev-help@mina.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@mina.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@mina.apache.org>
List-Post: <mailto:dev@mina.apache.org>
List-Id: <dev.mina.apache.org>
Reply-To: dev@mina.apache.org
Delivered-To: mailing list dev@mina.apache.org
Received: (qmail 92499 invoked by uid 99); 13 Nov 2009 17:09:03 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 13 Nov 2009 17:09:03 +0000
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of gnodet@gmail.com designates
 209.85.218.217 as permitted sender)
Received: from [209.85.218.217] (HELO mail-bw0-f217.google.com)
 (209.85.218.217)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 13 Nov 2009 17:08:52 +0000
Received: by bwz9 with SMTP id 9so8403196bwz.32
        for <dev@mina.apache.org>; Fri, 13 Nov 2009 09:08:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:mime-version:received:in-reply-to:references
         :date:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        bh=H+nNNdg1SJYEL+lyNpsT8pYCnPxZZbN9UFNjy5Vb2+4=;
        b=WRRdaEw4jOIiD4KI5YNCH7uwJ4ZcsUTEeMPGvWTu6fIgcu3t/1y1Tskvjx8Ng/fCSx
         BTJ8T6jzuKe26/aEWqLIzMkKJY/3IJIiNwIZD2l95Ig8xTdDx+ZdbOyBgiyzPEFiH119
         P4nAYxtOXreovzMDdDYO20LoBrH0Q16y0sHe0=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=tpH+eNMB+51tUQKhn0i9FqSRy3UDQoRWzHy9N+FcHigIQJAXQyVUiVNysRpPzA7aN7
         rN4gbfc7RZQS8BVkzRZdxg4ku1as21TBTIA6ohKVEPKRI+LNn74yKeXXlLy89eEyrS/z
         +/nbYfvve8l+yTZgOkyFjsmseaN+/DILyV/ls=
MIME-Version: 1.0
Received: by 10.223.15.148 with SMTP id k20mr699914faa.6.1258132112380; Fri,
	13 Nov 2009 09:08:32 -0800 (PST)
In-Reply-To: <1cc472780911130700j200442dr692825f67eedbc90@mail.gmail.com>
References: <4AEB3E2A.8070906@fifthhorseman.net>
	 <1cc472780911130700j200442dr692825f67eedbc90@mail.gmail.com>
Date: Fri, 13 Nov 2009 18:08:32 +0100
Message-ID: <b23ecedc0911130908q23f52ddp1eeab1930bcb6331@mail.gmail.com>
Subject: Re: symmetry of pluggable authentication classes?
From: Guillaume Nodet <gnodet@gmail.com>
To: dev@mina.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Virus-Checked: Checked by ClamAV on apache.org

Yeah, it may make more sense to always return a boolean then.  Wdyt ?

Btw, I've done quite a bit of refactoring on the shell / commands
interfaces, so it will break any existing app (though the changes are
quite easy to do).

On Fri, Nov 13, 2009 at 16:00, Shawn Pearce <sop@google.com> wrote:
> On Fri, Oct 30, 2009 at 11:27, Daniel Kahn Gillmor
> <dkg@fifthhorseman.net> wrote:
>>
>> =A0http://mina.apache.org/sshd/configuring-security.html
>>
>> Also, should either authenticator do anything with the ServerSession
>> object passed in? =A0There does not seem to be any comment about that
>> parameter in the interface file.
>
> The ServerSession parameter is there so the authenticator can attach
> session attributes via setAttribute(AttributeKey<T> key). =A0E.g. one of
> my applications uses this to attach the application specific object
> which represents a user and what they are permitted to access once the
> session has been established. =A0This is later then available to the
> CommandFactory, and can be given to any Command implementations it
> constructs.
>
> But if all you care about is yes-allow/no-deny, the parameter doesn't
> need to be used.
>



--=20
Cheers,
Guillaume Nodet
------------------------
Blog: http://gnodet.blogspot.com/
------------------------
Open Source SOA
http://fusesource.com