X-Git-Url: http://git.argeo.org/?a=blobdiff_plain;ds=sidebyside;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Finternal%2Fkernel%2FNodeUserAdmin.java;h=cb80f7c7f9f446794604a0b0ecc6b9d5f63cdac4;hb=f552b4781dca895ba2b09e41160748d3b3f63daf;hp=d1d4721389bcad5ab05acd536a6e5c60ec8ae216;hpb=0e17ab40fd2df40dcfacc414ef8fe2d4503dbbfa;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/kernel/NodeUserAdmin.java b/org.argeo.cms/src/org/argeo/cms/internal/kernel/NodeUserAdmin.java
index d1d472138..cb80f7c7f 100644
--- a/org.argeo.cms/src/org/argeo/cms/internal/kernel/NodeUserAdmin.java
+++ b/org.argeo.cms/src/org/argeo/cms/internal/kernel/NodeUserAdmin.java
@@ -34,11 +34,11 @@ import org.apache.commons.httpclient.params.HttpMethodParams;
 import org.apache.commons.httpclient.params.HttpParams;
 import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
+import org.argeo.api.NodeConstants;
 import org.argeo.cms.CmsException;
 import org.argeo.cms.internal.http.client.HttpCredentialProvider;
 import org.argeo.cms.internal.http.client.SpnegoAuthScheme;
 import org.argeo.naming.DnsBrowser;
-import org.argeo.node.NodeConstants;
 import org.argeo.osgi.useradmin.AbstractUserDirectory;
 import org.argeo.osgi.useradmin.AggregatingUserAdmin;
 import org.argeo.osgi.useradmin.LdapUserAdmin;
@@ -61,9 +61,6 @@ import org.osgi.service.useradmin.Authorization;
 import org.osgi.service.useradmin.UserAdmin;
 import org.osgi.util.tracker.ServiceTracker;
 
-import bitronix.tm.BitronixTransactionManager;
-import bitronix.tm.resource.ehcache.EhCacheXAResourceProducer;
-
 /**
  * Aggregates multiple {@link UserDirectory} and integrates them with system
  * roles.
@@ -79,16 +76,17 @@ class NodeUserAdmin extends AggregatingUserAdmin implements ManagedServiceFactor
 
 	// JTA
 	private final ServiceTracker<TransactionManager, TransactionManager> tmTracker;
-	private final String cacheName = UserDirectory.class.getName();
+	// private final String cacheName = UserDirectory.class.getName();
 
 	// GSS API
 	private Path nodeKeyTab = KernelUtils.getOsgiInstancePath(KernelConstants.NODE_KEY_TAB_PATH);
 	private GSSCredential acceptorCredentials;
 
 	private boolean singleUser = false;
+	private boolean systemRolesAvailable = false;
 
-	public NodeUserAdmin(String systemRolesBaseDn) {
-		super(systemRolesBaseDn);
+	public NodeUserAdmin(String systemRolesBaseDn, String tokensBaseDn) {
+		super(systemRolesBaseDn, tokensBaseDn);
 		tmTracker = new ServiceTracker<>(bc, TransactionManager.class, null);
 		tmTracker.open();
 	}
@@ -137,7 +135,13 @@ class NodeUserAdmin extends AggregatingUserAdmin implements ManagedServiceFactor
 			log.debug("User directory " + userDirectory.getBaseDn() + " [" + u.getScheme() + "] enabled."
 					+ (realm != null ? " " + realm + " realm." : ""));
 
-		if (isSystemRolesBaseDn(baseDn)) {
+		if (isSystemRolesBaseDn(baseDn))
+			systemRolesAvailable = true;
+
+		// start publishing only when system roles are available
+		if (systemRolesAvailable) {
+			// The list of baseDns is published as properties
+			// TODO clients should rather reference USerDirectory services
 			if (userAdminReg != null)
 				userAdminReg.unregister();
 			// register self as main user admin
@@ -177,8 +181,8 @@ class NodeUserAdmin extends AggregatingUserAdmin implements ManagedServiceFactor
 		if (tm == null)
 			throw new CmsException("A JTA transaction manager must be available.");
 		userDirectory.setTransactionManager(tm);
-		if (tmTracker.getService() instanceof BitronixTransactionManager)
-			EhCacheXAResourceProducer.registerXAResource(cacheName, userDirectory.getXaResource());
+//		if (tmTracker.getService() instanceof BitronixTransactionManager)
+//			EhCacheXAResourceProducer.registerXAResource(cacheName, userDirectory.getXaResource());
 
 		Object realm = userDirectory.getProperties().get(UserAdminConf.realm.name());
 		if (realm != null) {
@@ -218,8 +222,8 @@ class NodeUserAdmin extends AggregatingUserAdmin implements ManagedServiceFactor
 	}
 
 	protected void preDestroy(AbstractUserDirectory userDirectory) {
-		if (tmTracker.getService() instanceof BitronixTransactionManager)
-			EhCacheXAResourceProducer.unregisterXAResource(cacheName, userDirectory.getXaResource());
+//		if (tmTracker.getService() instanceof BitronixTransactionManager)
+//			EhCacheXAResourceProducer.unregisterXAResource(cacheName, userDirectory.getXaResource());
 
 		Object realm = userDirectory.getProperties().get(UserAdminConf.realm.name());
 		if (realm != null) {