Content deleted Content added
Added reference to a major vulnerability enabled by careless use of JNDI |
|||
(143 intermediate revisions by more than 100 users not shown) | |||
Line 1:
{{more citations needed|date=July 2014}}
The '''Java Naming and Directory Interface''' ('''JNDI''') is
Typical uses of JNDI include:
* connecting a Java application to an external directory service (such as an address database or an [[LDAP]] server)
* allowing a [[Java Servlet]] to look up configuration information provided by the hosting [[web container]]<ref>
{{cite web|title=JNDI Resources HOW-TO|url=http://tomcat.apache.org/tomcat-7.0-doc/jndi-resources-howto.html|work=Apache Tomcat 7 User Guide|publisher=Apache Software Foundation|access-date=21 January 2014}}</ref>
==Background==
The
The API provides:
* a mechanism to bind an object to a name
* a directory
* an event interface that allows clients to determine when directory entries have been modified
* LDAP extensions to support the additional capabilities of an LDAP service
The [[Service provider interface|SPI]] portion allows support for practically any kind of naming or directory service, including:▼
▲The SPI portion allows support for practically any kind of naming or directory service including:
* [[Lightweight Directory Access Protocol|LDAP]]
* [[Domain Name System|DNS]]
* [[Network Information Service|NIS]]
* [[CORBA]] name service
* [[
[[Sun Microsystems]] first released the JNDI specification on March 10, 1997.<ref>
{{cite web |url=http://www.sun.com/smi/Press/sunflash/1997-03/sunflash.970310.10204.html |title=SUN MICROSYSTEMS, INC. INTRODUCES JAVA NAMING AND DIRECTORY INTERFACE API |date=1997-03-10 |website=sun.com |archive-url=https://web.archive.org/web/20040908114732/http://www.sun.com/smi/Press/sunflash/1997-03/sunflash.970310.10204.html |archive-date=2004-09-08}}</ref> {{As of|2006}}, the current version is JNDI 1.2.
==
JNDI (Java Naming and Directory Interface) organizes its names into a hierarchy. A name can be any string such as "com.
▲JNDI organizes its names into a hierarchy. A name can be any string such as "com.mydomain.ejb.MyBean". A name can also be an object that supports the <code>Name</code> interface, however a string is the most common way to name an object. A name is bound to an object in the directory by storing either the object or a [[JNDI reference|reference]] to the object in the directory service identified by the name.
The JNDI API defines a context that specifies where to look for an object. The initial context is typically used as a starting point.
Line 28 ⟶ 34:
In the simplest case, an initial context must be created using the specific implementation and extra parameters required by the implementation. The initial context will be used to look up a name. The initial context is analogous to the root or top of a directory tree for a file system. Below is an example of creating an initial context:
<
Hashtable
//
// This is how you choose between jboss implementation
// vs. an implementation from Sun or other vendors.
// The next argument is the URL specifying where the data store is:
//You may also have to provide security credentials▼
//next you create the initial context▼
▲// (You may also have to provide security credentials)
Context myCurrentContext = new InitialContext( args );▼
Context myCurrentContext = new InitialContext(contextArgs);
</syntaxhighlight>
A context is then used to look up previously bound names in that context. For example:
<
</syntaxhighlight>
MyBean myBean = (MyBean) PortableRemoteObject.narrow( reference, MyBean.class );▼
Alternative to above code is as below:
== Searching ==▼
The Context object can also be configured by adding jndi.properties file in classpath containing initial context factory class name and provider URL. The above code will be reduced as shown below:
Attributes may be attached to special entries called directories. Directories are required in order to enable searching for objects by their associated attributes. Directories are a type of context, they restrict the name space much like a directory structure on a file system does.▼
<syntaxhighlight lang="java">
== External links ==▼
//just need to create initial context object, it will try to read jndi.properties file from the classpath.
</syntaxhighlight>
A context is then used to look up previously bound names in that context. For example:
* [http://java.sun.com/products/jndi/ Sun's JNDI page]▼
<syntaxhighlight lang="java">
▲MyBean myBean = (MyBean)
</syntaxhighlight>
▲Attributes may be attached to special entries called directories. Directories
==See also==
{{Portal|Computer programming}}
* [[Service locator pattern]]
* [[Log4Shell]]
==References==
<references />
*[http://docs.oracle.com/javase/7/docs/technotes/guides/jndi/index.html Java SE 7 JNDI page]
*[http://docs.oracle.com/javase/8/docs/technotes/guides/jndi/index.html Java SE 8 JNDI page]
*[https://docs.oracle.com/javase/8/docs/technotes/guides/jndi/reference.html Java SE 8 JNDI <code>javax.naming</code> Reference Documentation]
{{Java (Sun)}}
[[Category:Java enterprise platform|Naming and Directory Interface]]
[[Category:Java APIs]]
[[Category:Application layer protocols]]
▲[[ca:Java Naming and Directory Interface]]
|