GT-2658 GhidraServer authentication via JAAS

Add JAAS auth mode -a4.
Supply some example JAAS config files.
This commit is contained in:
dev747368
2019-08-30 10:04:30 -04:00
parent 90f832bf1d
commit a62730477e
16 changed files with 915 additions and 122 deletions
@@ -106,7 +106,7 @@ ghidra.repositories.dir=./repositories
# Ghidra server startup parameters.
#
# Command line parameters: (Add command line parameters as needed and renumber each starting from .1)
# [-ip <hostname>] [-i ###.###.###.###] [-p#] [-a#] [-anonymous] [-ssh] [-d<ntDomain>] [-e<days>] [-u] [-n] <repositories_path>
# [-ip <hostname>] [-i ###.###.###.###] [-p#] [-a#] [-anonymous] [-ssh] [-d<ntDomain>] [-e<days>] [-u] [-jaas <config_file>] [-autoProvision] [-n] <repositories_path>
#
# -ip <hostname> : remote access hostname or IPv4 address to be used by clients
# -i #.#.#.# : interface IPv4 address to accept connections on (default all interfaces)
@@ -114,10 +114,15 @@ ghidra.repositories.dir=./repositories
# -a# : an optional authentication mode where # is a value 0 or 2
# 0 - Private user password
# 2 - PKI Authentication
# 4 - JAAS Authentication
# -anonymous : enables anonymous repository access (see svrREADME.html for details)
# -ssh : enables SSH authentication for headless clients
# -e<days> : specifies default password expiration time in days (-a0 mode only, default is 1-day)
# -u : enable users to be prompted for user ID (does not apply to -a2 PKI mode)
# -jaas <path_to_config_file> : specifies JAAS config file.
# -autoProvision : enable the auto-creation of Ghidra users when the authenticator module
# (ie. OS or other authentication method specified by JAAS) authenticates
# a new unknown user.
# -n : enable reverse name lookup for IP addresses when logging (requires proper configuration
# of reverse lookup by your DNS server)
# ${ghidra.repositories.dir} : config variable (defined above) which identifies the directory