X-Git-Url: http://git.argeo.org/?a=blobdiff_plain;f=security%2Fmodules%2Forg.argeo.security.manager.ldap%2FMETA-INF%2Fspring%2Fldap.xml;h=bd117530d814198547a7cabce1219ca861e708a8;hb=5bfc0d2e2e34f86b454a1ec209617a9fc0f306b1;hp=534bfe5df342ad9088f9b9db13438c85066f70f0;hpb=ff1367187d728854f39a55e360f8908d4ab04159;p=lgpl%2Fargeo-commons.git

diff --git a/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml b/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml
index 534bfe5df..bd117530d 100644
--- a/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml
+++ b/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml
@@ -5,9 +5,25 @@
               http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd">
 
 
+	<bean
+		class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
+		<property name="systemPropertiesModeName" value="SYSTEM_PROPERTIES_MODE_OVERRIDE" />
+		<property name="locations">
+			<value>osgibundle:ldap.properties
+			</value>
+		</property>
+	</bean>
+
 	<bean id="_authenticationManager" class="org.springframework.security.providers.ProviderManager">
 		<property name="providers">
 			<list>
+				<bean class="org.springframework.security.adapters.AuthByAdapterProvider">
+					<property name="key" value="${argeo.security.systemKey}" />
+				</bean>
+				<bean
+					class="org.springframework.security.providers.rememberme.RememberMeAuthenticationProvider">
+					<property name="key" value="${argeo.security.systemKey}" />
+				</bean>
 				<ref bean="authenticationProvider" />
 			</list>
 		</property>
@@ -15,9 +31,10 @@
 
 	<bean id="contextSource"
 		class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
-		<constructor-arg value="ldap://localhost:10389/dc=demo,dc=argeo,dc=org" />
-		<property name="userDn" value="uid=admin,ou=system" />
-		<property name="password" value="secret" />
+		<constructor-arg
+			value="${argeo.ldap.protocol}://${argeo.ldap.host}:${argeo.ldap.port}/${argeo.ldap.rootdn}" />
+		<property name="userDn" value="${argeo.ldap.manager.userdn}" />
+		<property name="password" value="${argeo.ldap.manager.password}" />
 	</bean>
 
 	<bean id="authenticationProvider"
@@ -36,12 +53,16 @@
 		<property name="userNatureMappers" ref="userNatureMappers" />
 	</bean>
 
+	<bean id="userDetailsService" factory-bean="securityDao"
+		factory-method="getUserDetailsService">
+	</bean>
+
 	<bean id="ldapAuthenticator"
 		class="org.springframework.security.providers.ldap.authenticator.PasswordComparisonAuthenticator">
 		<constructor-arg ref="contextSource" />
 		<property name="userDnPatterns">
 			<list>
-				<value>uid={0},ou=users</value>
+				<value>uid={0},ou=People</value>
 			</list>
 		</property>
 		<property name="passwordEncoder">
@@ -49,26 +70,4 @@
 				class="org.springframework.security.providers.ldap.authenticator.LdapShaPasswordEncoder" />
 		</property>
 	</bean>
-
-
-	<!--
-		<bean id="authoritiesPopulator"
-		class="org.argeo.security.ldap.ArgeoLdapAuthoritiesPopulator">
-		<constructor-arg ref="contextSource" /> <constructor-arg
-		value="ou=groups" /> <property name="defaultRole" value="ROLE_USER" />
-		<property name="groupSearchFilter" value="uniqueMember={0}" /> </bean>
-
-		<bean id="userDetailsManager"
-		class="org.springframework.security.userdetails.ldap.LdapUserDetailsManager">
-		<constructor-arg ref="contextSource" /> <property
-		name="userDetailsMapper" ref="userDetailsMapper" /> <property
-		name="groupSearchBase" value="ou=groups" /> <property
-		name="usernameMapper"> <bean
-		class="org.springframework.security.ldap.DefaultLdapUsernameToDnMapper">
-		<constructor-arg value="ou=users" /> <constructor-arg value="uid" />
-		</bean> </property> </bean>
-	<bean id="userDetailsMapper" class="org.argeo.security.ldap.ArgeoUserDetailsContextMapper">
-		<property name="userNatureMappers" ref="userNatureMappers" />
-	</bean>
-	-->
 </beans>