public class org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider extends java.lang.Object implements org.apache.nifi.registry.security.authorization.UserGroupProvider { private static final org.slf4j.Logger logger; public static final java.lang.String PROP_CONNECT_TIMEOUT; public static final java.lang.String PROP_READ_TIMEOUT; public static final java.lang.String PROP_AUTHENTICATION_STRATEGY; public static final java.lang.String PROP_MANAGER_DN; public static final java.lang.String PROP_MANAGER_PASSWORD; public static final java.lang.String PROP_REFERRAL_STRATEGY; public static final java.lang.String PROP_URL; public static final java.lang.String PROP_PAGE_SIZE; public static final java.lang.String PROP_GROUP_MEMBERSHIP_ENFORCE_CASE_SENSITIVITY; public static final java.lang.String PROP_USER_SEARCH_BASE; public static final java.lang.String PROP_USER_OBJECT_CLASS; public static final java.lang.String PROP_USER_SEARCH_SCOPE; public static final java.lang.String PROP_USER_SEARCH_FILTER; public static final java.lang.String PROP_USER_IDENTITY_ATTRIBUTE; public static final java.lang.String PROP_USER_GROUP_ATTRIBUTE; public static final java.lang.String PROP_USER_GROUP_REFERENCED_GROUP_ATTRIBUTE; public static final java.lang.String PROP_GROUP_SEARCH_BASE; public static final java.lang.String PROP_GROUP_OBJECT_CLASS; public static final java.lang.String PROP_GROUP_SEARCH_SCOPE; public static final java.lang.String PROP_GROUP_SEARCH_FILTER; public static final java.lang.String PROP_GROUP_NAME_ATTRIBUTE; public static final java.lang.String PROP_GROUP_MEMBER_ATTRIBUTE; public static final java.lang.String PROP_GROUP_MEMBER_REFERENCED_USER_ATTRIBUTE; public static final java.lang.String PROP_SYNC_INTERVAL; private org.apache.nifi.registry.security.identity.IdentityMapper identityMapper; private java.util.concurrent.ScheduledExecutorService ldapSync; private final java.util.concurrent.atomic.AtomicReference tenants; private java.lang.String userSearchBase; private org.apache.nifi.registry.security.ldap.tenants.SearchScope userSearchScope; private java.lang.String userSearchFilter; private java.lang.String userIdentityAttribute; private java.lang.String userObjectClass; private java.lang.String userGroupNameAttribute; private java.lang.String userGroupReferencedGroupAttribute; private boolean useDnForUserIdentity; private boolean performUserSearch; private java.lang.String groupSearchBase; private org.apache.nifi.registry.security.ldap.tenants.SearchScope groupSearchScope; private java.lang.String groupSearchFilter; private java.lang.String groupMemberAttribute; private java.lang.String groupMemberReferencedUserAttribute; private java.lang.String groupNameAttribute; private java.lang.String groupObjectClass; private boolean useDnForGroupName; private boolean performGroupSearch; private java.lang.Integer pageSize; private boolean groupMembershipEnforceCaseSensitivity; public void () { org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; java.util.concurrent.atomic.AtomicReference v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; specialinvoke v.()>(); v = new java.util.concurrent.atomic.AtomicReference; specialinvoke v.(java.lang.Object)>(null); v. = v; return; } public void initialize(org.apache.nifi.registry.security.authorization.UserGroupProviderInitializationContext) throws org.apache.nifi.registry.security.exception.SecurityProviderCreationException { org.apache.nifi.registry.security.authorization.UserGroupProviderInitializationContext v; java.util.concurrent.ScheduledExecutorService v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider$1 v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.apache.nifi.registry.security.authorization.UserGroupProviderInitializationContext; v = new org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider$1; specialinvoke v.(org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider,org.apache.nifi.registry.security.authorization.UserGroupProviderInitializationContext)>(v, v); v = staticinvoke (v); v. = v; return; } public void onConfigured(org.apache.nifi.registry.security.authorization.AuthorizerConfigurationContext) throws org.apache.nifi.registry.security.exception.SecurityProviderCreationException { java.lang.Integer v; org.apache.nifi.registry.security.ldap.ReferralStrategy[] v; java.lang.Object[] v, v, v, v, v; long v; java.util.concurrent.ScheduledExecutorService v; org.apache.nifi.registry.security.exception.SecurityProviderCreationException v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; org.apache.nifi.registry.security.ldap.tenants.SearchScope v, v; java.lang.Runnable v; int[] v, v; org.springframework.ldap.core.support.LdapContextSource v; org.apache.nifi.registry.security.ldap.LdapAuthenticationStrategy v; int v, v, v, v; java.lang.Boolean v; org.apache.nifi.registry.security.ldap.LdapAuthenticationStrategy[] v; org.apache.nifi.registry.security.authorization.AuthorizerConfigurationContext v; java.lang.Class v; java.lang.Object v; org.apache.nifi.registry.util.PropertyValue v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; javax.net.ssl.SSLContext v, v; java.lang.Exception v; javax.net.ssl.SSLSocketFactory v, v; java.lang.Throwable v; java.lang.String v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; boolean v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; org.apache.nifi.registry.security.ldap.ReferralStrategy v; java.lang.String[] v; java.util.HashMap v; java.util.concurrent.atomic.AtomicReference v; org.springframework.ldap.core.support.SimpleDirContextAuthenticationStrategy v, v; org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy v; double v; java.lang.IllegalArgumentException v, v, v, v, v; java.util.concurrent.TimeUnit v, v; org.apache.nifi.registry.security.ldap.tenants.SearchScope[] v, v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.apache.nifi.registry.security.authorization.AuthorizerConfigurationContext; v = new org.springframework.ldap.core.support.LdapContextSource; specialinvoke v.()>(); v = new java.util.HashMap; specialinvoke v.()>(); specialinvoke v.(v, v, "Connect Timeout", "com.sun.jndi.ldap.connect.timeout"); specialinvoke v.(v, v, "Read Timeout", "com.sun.jndi.ldap.read.timeout"); v = interfaceinvoke v.("Authentication Strategy"); label: v = interfaceinvoke v.(); v = staticinvoke (v); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; v = newarray (java.lang.Object)[2]; v = interfaceinvoke v.(); v[0] = v; v = staticinvoke (); v = staticinvoke (v, ", "); v[1] = v; v = staticinvoke ("Unrecognized authentication strategy \'%s\'. Possible values are [%s]", v); specialinvoke v.(java.lang.String)>(v); throw v; label: v = ; v = virtualinvoke v.(); v = v[v]; lookupswitch(v) { case 4: goto label; default: goto label; }; label: virtualinvoke v.(1); goto label; label: v = interfaceinvoke v.("Manager DN"); v = interfaceinvoke v.(); v = interfaceinvoke v.("Manager Password"); v = interfaceinvoke v.(); virtualinvoke v.(v); virtualinvoke v.(v); v = ; v = virtualinvoke v.(); v = v[v]; tableswitch(v) { case 1: goto label; case 2: goto label; case 3: goto label; default: goto label; }; label: v = new org.springframework.ldap.core.support.SimpleDirContextAuthenticationStrategy; specialinvoke v.()>(); virtualinvoke v.(v); goto label; label: v = new org.springframework.ldap.core.support.SimpleDirContextAuthenticationStrategy; specialinvoke v.()>(); virtualinvoke v.(v); interfaceinvoke v.("java.naming.security.protocol", "ssl"); v = specialinvoke v.(v); if v == null goto label; v = virtualinvoke v.(); staticinvoke (v); v = class "Lorg/apache/nifi/registry/security/ldap/LdapsSocketFactory;"; v = virtualinvoke v.(); interfaceinvoke v.("java.naming.ldap.factory.socket", v); goto label; label: v = new org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy; specialinvoke v.()>(); v = interfaceinvoke v.("TLS - Shutdown Gracefully"); v = interfaceinvoke v.(); v = staticinvoke (v); if v == 0 goto label; v = ; v = virtualinvoke v.(); v = virtualinvoke v.(v); virtualinvoke v.(v); label: v = specialinvoke v.(v); if v == null goto label; v = virtualinvoke v.(); virtualinvoke v.(v); label: virtualinvoke v.(v); label: v = interfaceinvoke v.("Referral Strategy"); v = interfaceinvoke v.(); label: v = staticinvoke (v); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; v = newarray (java.lang.Object)[2]; v[0] = v; v = staticinvoke (); v = staticinvoke (v, ", "); v[1] = v; v = staticinvoke ("Unrecognized referral strategy \'%s\'. Possible values are [%s]", v); specialinvoke v.(java.lang.String)>(v); throw v; label: v = virtualinvoke v.(); virtualinvoke v.(v); v = interfaceinvoke v.("Url"); v = interfaceinvoke v.(); v = staticinvoke (v); if v == 0 goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("LDAP identity provider \'Url\' must be specified."); throw v; label: v = staticinvoke (v); virtualinvoke v.(v); v = interfaceinvoke v.("User Search Base"); v = interfaceinvoke v.("User Object Class"); v = interfaceinvoke v.("User Search Scope"); v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); if v != 0 goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("LDAP user group provider \'User Object Class\' must be specified when \'User Search Base\' is set."); throw v; label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); if v != 0 goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("LDAP user group provider \'User Search Scope\' must be specified when \'User Search Base\' is set."); throw v; label: v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.("User Search Filter"); v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.("User Identity Attribute"); v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.("User Group Name Attribute"); v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.("User Group Name Attribute - Referenced Group Attribute"); v = interfaceinvoke v.(); v. = v; label: v = interfaceinvoke v.(); v = staticinvoke (v); v. = v; label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; v = newarray (java.lang.Object)[2]; v = interfaceinvoke v.(); v[0] = v; v = staticinvoke (); v = staticinvoke (v, ", "); v[1] = v; v = staticinvoke ("Unrecognized user search scope \'%s\'. Possible values are [%s]", v); specialinvoke v.(java.lang.String)>(v); throw v; label: v = v.; v = staticinvoke (v); v. = v; v = v.; v = staticinvoke (v); v. = v; v = interfaceinvoke v.("Group Search Base"); v = interfaceinvoke v.("Group Object Class"); v = interfaceinvoke v.("Group Search Scope"); v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); if v != 0 goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("LDAP user group provider \'Group Object Class\' must be specified when \'Group Search Base\' is set."); throw v; label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); if v != 0 goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("LDAP user group provider \'Group Search Scope\' must be specified when \'Group Search Base\' is set."); throw v; label: v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.("Group Search Filter"); v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.("Group Name Attribute"); v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.("Group Member Attribute"); v = interfaceinvoke v.(); v. = v; v = interfaceinvoke v.("Group Member Attribute - Referenced User Attribute"); v = interfaceinvoke v.(); v. = v; label: v = interfaceinvoke v.(); v = staticinvoke (v); v. = v; label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; v = newarray (java.lang.Object)[2]; v = interfaceinvoke v.(); v[0] = v; v = staticinvoke (); v = staticinvoke (v, ", "); v[1] = v; v = staticinvoke ("Unrecognized group search scope \'%s\'. Possible values are [%s]", v); specialinvoke v.(java.lang.String)>(v); throw v; label: v = v.; v = staticinvoke (v); v. = v; v = v.; v = staticinvoke (v); v. = v; v = v.; if v != 0 goto label; v = v.; if v != 0 goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("LDAP user group provider \'User Search Base\' or \'Group Search Base\' must be specified."); throw v; label: v = v.; if v == 0 goto label; v = v.; if v != 0 goto label; v = v.; v = staticinvoke (v); if v == 0 goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("\'Group Member Attribute\' is required when searching groups but not users."); throw v; label: v = v.; v = staticinvoke (v); if v == 0 goto label; v = v.; if v != 0 goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("\'\'User Search Base\' must be set when specifying \'Group Member Attribute - Referenced User Attribute\'."); throw v; label: v = v.; v = staticinvoke (v); if v == 0 goto label; v = v.; if v != 0 goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("\'Group Search Base\' must be set when specifying \'User Group Name Attribute - Referenced Group Attribute\'."); throw v; label: v = interfaceinvoke v.("Page Size"); v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = staticinvoke (v); if v == 0 goto label; v = interfaceinvoke v.(); v. = v; label: v = interfaceinvoke v.("Group Membership - Enforce Case Sensitivity"); v = interfaceinvoke v.(); v = staticinvoke (v); v. = v; v = interfaceinvoke v.(); if v != 0 goto label; virtualinvoke v.(v); label: virtualinvoke v.(); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; v = virtualinvoke v.(); specialinvoke v.(java.lang.String,java.lang.Throwable)>(v, v); throw v; label: v = interfaceinvoke v.("Sync Interval"); v = interfaceinvoke v.(); if v == 0 goto label; label: v = interfaceinvoke v.(); v = ; v = staticinvoke (v, v); v = staticinvoke (v); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; v = newarray (java.lang.Object)[2]; v[0] = "Sync Interval"; v = interfaceinvoke v.(); v[1] = v; v = staticinvoke ("The %s \'%s\' is not a valid time duration", v); specialinvoke v.(java.lang.String)>(v); throw v; label: v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("The \'Sync Interval\' must be specified."); throw v; label: specialinvoke v.(v); v = v.; v = virtualinvoke v.(); if v != null goto label; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.String)>("Unable to sync users and groups."); throw v; label: v = v.; v = staticinvoke (v, v, v); v = ; interfaceinvoke v.(v, v, v, v); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; specialinvoke v.(java.lang.Throwable)>(v); throw v; label: return; catch java.lang.IllegalArgumentException from label to label with label; catch java.lang.IllegalArgumentException from label to label with label; catch java.lang.IllegalArgumentException from label to label with label; catch java.lang.IllegalArgumentException from label to label with label; catch java.lang.Exception from label to label with label; catch java.lang.IllegalArgumentException from label to label with label; catch org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException from label to label with label; } public java.util.Set getUsers() throws org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException { java.util.Set v; java.lang.Object v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; java.util.concurrent.atomic.AtomicReference v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v = v.; v = virtualinvoke v.(); v = virtualinvoke v.(); return v; } public org.apache.nifi.registry.security.authorization.User getUser(java.lang.String) throws org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException { java.util.Map v; java.lang.Object v, v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; java.lang.String v; java.util.concurrent.atomic.AtomicReference v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: java.lang.String; v = v.; v = virtualinvoke v.(); v = virtualinvoke v.(); v = interfaceinvoke v.(v); return v; } public org.apache.nifi.registry.security.authorization.User getUserByIdentity(java.lang.String) throws org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException { java.lang.Object v; org.apache.nifi.registry.security.authorization.User v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; java.lang.String v; java.util.concurrent.atomic.AtomicReference v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: java.lang.String; v = v.; v = virtualinvoke v.(); v = virtualinvoke v.(v); return v; } public java.util.Set getGroups() throws org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException { java.util.Set v; java.lang.Object v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; java.util.concurrent.atomic.AtomicReference v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v = v.; v = virtualinvoke v.(); v = virtualinvoke v.(); return v; } public org.apache.nifi.registry.security.authorization.Group getGroup(java.lang.String) throws org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException { java.util.Map v; java.lang.Object v, v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; java.lang.String v; java.util.concurrent.atomic.AtomicReference v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: java.lang.String; v = v.; v = virtualinvoke v.(); v = virtualinvoke v.(); v = interfaceinvoke v.(v); return v; } public org.apache.nifi.registry.security.authorization.UserAndGroups getUserAndGroups(java.lang.String) throws org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException { org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider$2 v; java.lang.Object v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; java.lang.String v; java.util.concurrent.atomic.AtomicReference v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: java.lang.String; v = v.; v = virtualinvoke v.(); v = new org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider$2; specialinvoke v.(org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider,org.apache.nifi.registry.security.ldap.tenants.TenantHolder,java.lang.String)>(v, v, v); return v; } private void load(org.springframework.ldap.core.ContextSource) { org.springframework.ldap.filter.AndFilter v, v; org.springframework.ldap.core.LdapTemplate v; java.lang.Integer v, v, v, v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider$4 v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider$3 v; org.apache.nifi.registry.security.ldap.tenants.TenantHolder v; java.lang.Throwable v; java.util.ArrayList v, v; java.util.function.BiConsumer v, v; java.lang.String v, v, v, v, v, v, v, v, v, v; javax.naming.directory.DirContext v; org.springframework.ldap.core.LdapTemplate$NullDirContextProcessor v, v; org.apache.nifi.registry.security.ldap.tenants.SearchScope v, v; org.springframework.ldap.filter.EqualsFilter v, v; boolean v, v, v, v, v, v, v; org.springframework.ldap.filter.HardcodedFilter v, v; java.util.List v, v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; org.springframework.ldap.core.support.SingleContextSource v; org.springframework.ldap.control.PagedResultsDirContextProcessor v, v; java.util.HashMap v, v; java.util.concurrent.atomic.AtomicReference v; javax.naming.directory.SearchControls v, v; java.util.HashSet v, v; int v, v, v, v; org.slf4j.Logger v, v, v, v, v, v; org.springframework.ldap.core.ContextSource v; java.util.function.Consumer v, v; java.lang.Object v, v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.springframework.ldap.core.ContextSource; v = new org.springframework.ldap.core.support.SingleContextSource; v = interfaceinvoke v.(); specialinvoke v.(javax.naming.directory.DirContext)>(v); v = new org.springframework.ldap.core.LdapTemplate; specialinvoke v.(org.springframework.ldap.core.ContextSource)>(v); label: v = new java.util.ArrayList; specialinvoke v.()>(); v = new java.util.ArrayList; specialinvoke v.()>(); v = new java.util.HashMap; specialinvoke v.()>(); v = new java.util.HashMap; specialinvoke v.()>(); v = v.; if v == 0 goto label; v = new javax.naming.directory.SearchControls; specialinvoke v.()>(); v = v.; v = virtualinvoke v.(); virtualinvoke v.(v); v = v.; if v != null goto label; v = new org.springframework.ldap.core.LdapTemplate$NullDirContextProcessor; specialinvoke v.()>(); v = v; goto label; label: v = new org.springframework.ldap.control.PagedResultsDirContextProcessor; v = v.; v = virtualinvoke v.(); specialinvoke v.(int)>(v); v = v; label: v = new org.springframework.ldap.filter.AndFilter; specialinvoke v.()>(); v = new org.springframework.ldap.filter.EqualsFilter; v = v.; specialinvoke v.(java.lang.String,java.lang.String)>("objectClass", v); virtualinvoke v.(v); v = v.; v = staticinvoke (v); if v == 0 goto label; v = new org.springframework.ldap.filter.HardcodedFilter; v = v.; specialinvoke v.(java.lang.String)>(v); virtualinvoke v.(v); label: v = v.; v = virtualinvoke v.(); v = new org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider$3; specialinvoke v.(org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider,java.util.Map,java.util.Map)>(v, v, v); v = virtualinvoke v.(v, v, v, v, v); interfaceinvoke v.(v); v = specialinvoke v.(v); if v != 0 goto label; label: v = v.; if v == 0 goto label; v = new javax.naming.directory.SearchControls; specialinvoke v.()>(); v = v.; v = virtualinvoke v.(); virtualinvoke v.(v); v = v.; if v != null goto label; v = new org.springframework.ldap.core.LdapTemplate$NullDirContextProcessor; specialinvoke v.()>(); v = v; goto label; label: v = new org.springframework.ldap.control.PagedResultsDirContextProcessor; v = v.; v = virtualinvoke v.(); specialinvoke v.(int)>(v); v = v; label: v = new org.springframework.ldap.filter.AndFilter; specialinvoke v.()>(); v = new org.springframework.ldap.filter.EqualsFilter; v = v.; specialinvoke v.(java.lang.String,java.lang.String)>("objectClass", v); virtualinvoke v.(v); v = v.; v = staticinvoke (v); if v == 0 goto label; v = new org.springframework.ldap.filter.HardcodedFilter; v = v.; specialinvoke v.(java.lang.String)>(v); virtualinvoke v.(v); label: v = v.; v = virtualinvoke v.(); v = new org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider$4; specialinvoke v.(org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider,java.util.Map,java.util.Map,org.springframework.ldap.core.LdapTemplate,java.util.List)>(v, v, v, v, v); v = virtualinvoke v.(v, v, v, v, v); interfaceinvoke v.(v); v = specialinvoke v.(v); if v != 0 goto label; v = staticinvoke (); interfaceinvoke v.(v); goto label; label: v = staticinvoke (v, v, v); interfaceinvoke v.(v); label: v = ; v = interfaceinvoke v.(); if v == 0 goto label; v = ; interfaceinvoke v.("-------------------------------------"); v = ; interfaceinvoke v.("Loaded the following users from LDAP:"); v = staticinvoke (); interfaceinvoke v.(v); v = ; interfaceinvoke v.("--------------------------------------"); v = ; interfaceinvoke v.("Loaded the following groups from LDAP:"); v = staticinvoke (); interfaceinvoke v.(v); v = ; interfaceinvoke v.("--------------------------------------"); label: v = v.; v = new org.apache.nifi.registry.security.ldap.tenants.TenantHolder; v = new java.util.HashSet; specialinvoke v.(java.util.Collection)>(v); v = new java.util.HashSet; specialinvoke v.(java.util.Collection)>(v); specialinvoke v.(java.util.Set,java.util.Set)>(v, v); virtualinvoke v.(v); label: virtualinvoke v.(); goto label; label: v := @caughtexception; virtualinvoke v.(); throw v; label: return; catch java.lang.Throwable from label to label with label; } private boolean hasMorePages(org.springframework.ldap.core.DirContextProcessor) { org.springframework.ldap.core.DirContextProcessor v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; boolean v, v, v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.springframework.ldap.core.DirContextProcessor; v = v instanceof org.springframework.ldap.control.PagedResultsDirContextProcessor; if v == 0 goto label; v = virtualinvoke v.(); if v == 0 goto label; v = 1; goto label; label: v = 0; label: return v; } private java.lang.String getUserIdentity(org.springframework.ldap.core.DirContextOperations) { org.springframework.ldap.core.DirContextOperations v; javax.naming.NamingException v; javax.naming.directory.Attribute v; org.apache.nifi.registry.security.identity.IdentityMapper v; java.lang.String v, v, v, v, v, v; org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException v, v; boolean v; javax.naming.Name v; javax.naming.directory.Attributes v; java.lang.Object v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.springframework.ldap.core.DirContextOperations; v = v.; if v == 0 goto label; v = interfaceinvoke v.(); virtualinvoke v.(); goto label; label: v = interfaceinvoke v.(); v = v.; v = interfaceinvoke v.(v); if v != null goto label; v = new org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("User identity attribute [\u] does not exist."); specialinvoke v.(java.lang.String)>(v); throw v; label: v = interfaceinvoke v.(); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("Error while retrieving user name attribute [\u]."); specialinvoke v.(java.lang.String)>(v); throw v; label: v = v.; v = interfaceinvoke v.(v); return v; catch javax.naming.NamingException from label to label with label; } private java.lang.String getReferencedUserValue(org.springframework.ldap.core.DirContextOperations) { org.springframework.ldap.core.DirContextOperations v; javax.naming.NamingException v; javax.naming.directory.Attribute v; java.lang.String v, v, v, v, v, v, v; org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException v, v; boolean v, v; javax.naming.Name v; javax.naming.directory.Attributes v; java.lang.Object v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.springframework.ldap.core.DirContextOperations; v = v.; v = staticinvoke (v); if v == 0 goto label; v = interfaceinvoke v.(); virtualinvoke v.(); goto label; label: v = interfaceinvoke v.(); v = v.; v = interfaceinvoke v.(v); if v != null goto label; v = new org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("Referenced user value attribute [\u] does not exist."); specialinvoke v.(java.lang.String)>(v); throw v; label: v = interfaceinvoke v.(); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("Error while retrieving reference user value attribute [\u]."); specialinvoke v.(java.lang.String)>(v); throw v; label: v = v.; if v == 0 goto label; v = v; goto label; label: v = virtualinvoke v.(); label: return v; catch javax.naming.NamingException from label to label with label; } private java.lang.String getGroupName(org.springframework.ldap.core.DirContextOperations) { org.springframework.ldap.core.DirContextOperations v; javax.naming.NamingException v; javax.naming.directory.Attribute v; org.apache.nifi.registry.security.identity.IdentityMapper v; java.lang.String v, v, v, v, v, v; org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException v, v; boolean v; javax.naming.Name v; javax.naming.directory.Attributes v; java.lang.Object v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.springframework.ldap.core.DirContextOperations; v = v.; if v == 0 goto label; v = interfaceinvoke v.(); virtualinvoke v.(); goto label; label: v = interfaceinvoke v.(); v = v.; v = interfaceinvoke v.(v); if v != null goto label; v = new org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("Group identity attribute [\u] does not exist."); specialinvoke v.(java.lang.String)>(v); throw v; label: v = interfaceinvoke v.(); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("Error while retrieving group name attribute [\u]."); specialinvoke v.(java.lang.String)>(v); throw v; label: v = v.; v = interfaceinvoke v.(v); return v; catch javax.naming.NamingException from label to label with label; } private java.lang.String getReferencedGroupValue(org.springframework.ldap.core.DirContextOperations) { org.springframework.ldap.core.DirContextOperations v; javax.naming.NamingException v; javax.naming.directory.Attribute v; java.lang.String v, v, v, v, v, v, v; org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException v, v; boolean v, v; javax.naming.Name v; javax.naming.directory.Attributes v; java.lang.Object v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.springframework.ldap.core.DirContextOperations; v = v.; v = staticinvoke (v); if v == 0 goto label; v = interfaceinvoke v.(); virtualinvoke v.(); goto label; label: v = interfaceinvoke v.(); v = v.; v = interfaceinvoke v.(v); if v != null goto label; v = new org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("Referenced group value attribute [\u] does not exist."); specialinvoke v.(java.lang.String)>(v); throw v; label: v = interfaceinvoke v.(); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.authorization.exception.AuthorizationAccessException; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("Error while retrieving referenced group value attribute [\u]."); specialinvoke v.(java.lang.String)>(v); throw v; label: v = v.; if v == 0 goto label; v = v; goto label; label: v = virtualinvoke v.(); label: return v; catch javax.naming.NamingException from label to label with label; } public void setIdentityMapper(org.apache.nifi.registry.security.identity.IdentityMapper) { org.apache.nifi.registry.security.identity.IdentityMapper v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.apache.nifi.registry.security.identity.IdentityMapper; v. = v; return; } public final void preDestruction() throws org.apache.nifi.registry.security.exception.SecurityProviderDestructionException { org.slf4j.Logger v; java.util.concurrent.TimeUnit v; java.lang.InterruptedException v; java.lang.Thread v; java.util.concurrent.ScheduledExecutorService v, v, v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; boolean v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v = v.; interfaceinvoke v.(); label: v = v.; v = ; v = interfaceinvoke v.(10000L, v); if v != 0 goto label; v = ; interfaceinvoke v.("Failed to stop ldap sync thread in 10 sec. Terminating"); v = v.; interfaceinvoke v.(); label: goto label; label: v := @caughtexception; v = staticinvoke (); virtualinvoke v.(); label: return; catch java.lang.InterruptedException from label to label with label; } private void setTimeout(org.apache.nifi.registry.security.authorization.AuthorizerConfigurationContext, java.util.Map, java.lang.String, java.lang.String) { java.lang.Object[] v; long v; java.util.Map v; java.lang.String v, v, v, v, v; boolean v; double v; org.apache.nifi.registry.security.exception.SecurityProviderCreationException v; java.lang.IllegalArgumentException v; java.util.concurrent.TimeUnit v; org.apache.nifi.registry.security.authorization.AuthorizerConfigurationContext v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; org.apache.nifi.registry.util.PropertyValue v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.apache.nifi.registry.security.authorization.AuthorizerConfigurationContext; v := @parameter: java.util.Map; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v = interfaceinvoke v.(v); v = interfaceinvoke v.(); if v == 0 goto label; label: v = interfaceinvoke v.(); v = ; v = staticinvoke (v, v); v = staticinvoke (v); v = staticinvoke (v); interfaceinvoke v.(v, v); label: goto label; label: v := @caughtexception; v = new org.apache.nifi.registry.security.exception.SecurityProviderCreationException; v = newarray (java.lang.Object)[2]; v[0] = v; v[1] = v; v = staticinvoke ("The %s \'%s\' is not a valid time duration", v); specialinvoke v.(java.lang.String)>(v); throw v; label: return; catch java.lang.IllegalArgumentException from label to label with label; } private javax.net.ssl.SSLContext getConfiguredSslContext(org.apache.nifi.registry.security.authorization.AuthorizerConfigurationContext) { javax.net.ssl.SSLContext v; org.apache.nifi.security.ssl.StandardSslContextBuilder v, v; boolean v, v, v, v, v; java.security.KeyStore v, v; java.lang.Exception v; org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider v; java.lang.Throwable v, v; java.lang.String v, v, v, v, v, v, v, v; org.apache.nifi.registry.security.exception.SecurityProviderCreationException v, v; java.io.FileInputStream v, v; org.apache.nifi.security.ssl.StandardKeyStoreBuilder v, v, v, v, v, v, v, v; org.apache.nifi.registry.security.authorization.AuthorizerConfigurationContext v; char[] v, v, v; org.apache.nifi.registry.util.PropertyValue v, v, v, v, v, v, v; v := @this: org.apache.nifi.registry.security.ldap.tenants.LdapUserGroupProvider; v := @parameter: org.apache.nifi.registry.security.authorization.AuthorizerConfigurationContext; v = interfaceinvoke v.("TLS - Keystore"); v = interfaceinvoke v.(); v = interfaceinvoke v.("TLS - Keystore Password"); v = interfaceinvoke v.(); v = interfaceinvoke v.("TLS - Keystore Type"); v = interfaceinvoke v.(); v = interfaceinvoke v.("TLS - Truststore"); v = interfaceinvoke v.(); v = interfaceinvoke v.