From 95d53b1b0018e86014d8659bdba9903e6f63526a Mon Sep 17 00:00:00 2001
From: Mathieu Baudier <mbaudier@argeo.org>
Date: Thu, 17 Mar 2011 15:48:48 +0000
Subject: [PATCH] Introduce LDAP saos

git-svn-id: https://svn.argeo.org/commons/trunk@4316 4cfe0d0a-d680-48aa-b62c-e0a02a3f76cc
---
 .../.project                                  | 22 +++++++
 .../META-INF/MANIFEST.MF                      | 20 ++++++
 .../META-INF/spring/ldap-osgi.xml             |  0
 .../META-INF/spring/ldap.xml                  |  0
 .../build.properties                          |  0
 .../ldap.properties                           |  0
 .../.project                                  |  0
 .../META-INF/MANIFEST.MF                      |  0
 .../META-INF/spring/ldap-osgi.xml             | 30 +++++++++
 .../META-INF/spring/ldap.xml                  | 61 +++++++++++++++++++
 .../META-INF/spring/natures-osgi.xml          |  0
 .../build.properties                          |  1 +
 .../ldap.properties                           |  6 ++
 13 files changed, 140 insertions(+)
 create mode 100644 security/modules/org.argeo.security.dao.admin.ldap/.project
 create mode 100644 security/modules/org.argeo.security.dao.admin.ldap/META-INF/MANIFEST.MF
 rename security/modules/{org.argeo.security.manager.ldap => org.argeo.security.dao.admin.ldap}/META-INF/spring/ldap-osgi.xml (100%)
 rename security/modules/{org.argeo.security.manager.ldap => org.argeo.security.dao.admin.ldap}/META-INF/spring/ldap.xml (100%)
 rename security/modules/{org.argeo.security.manager.ldap => org.argeo.security.dao.admin.ldap}/build.properties (100%)
 rename security/modules/{org.argeo.security.manager.ldap => org.argeo.security.dao.admin.ldap}/ldap.properties (100%)
 rename security/modules/{org.argeo.security.manager.ldap => org.argeo.security.dao.ldap}/.project (100%)
 rename security/modules/{org.argeo.security.manager.ldap => org.argeo.security.dao.ldap}/META-INF/MANIFEST.MF (100%)
 create mode 100644 security/modules/org.argeo.security.dao.ldap/META-INF/spring/ldap-osgi.xml
 create mode 100644 security/modules/org.argeo.security.dao.ldap/META-INF/spring/ldap.xml
 rename security/modules/{org.argeo.security.manager.ldap => org.argeo.security.dao.ldap}/META-INF/spring/natures-osgi.xml (100%)
 create mode 100644 security/modules/org.argeo.security.dao.ldap/build.properties
 create mode 100644 security/modules/org.argeo.security.dao.ldap/ldap.properties

diff --git a/security/modules/org.argeo.security.dao.admin.ldap/.project b/security/modules/org.argeo.security.dao.admin.ldap/.project
new file mode 100644
index 000000000..b79fc941e
--- /dev/null
+++ b/security/modules/org.argeo.security.dao.admin.ldap/.project
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+	<name>org.argeo.security.dao.admin.ldap</name>
+	<comment></comment>
+	<projects>
+	</projects>
+	<buildSpec>
+		<buildCommand>
+			<name>org.eclipse.pde.ManifestBuilder</name>
+			<arguments>
+			</arguments>
+		</buildCommand>
+		<buildCommand>
+			<name>org.eclipse.pde.SchemaBuilder</name>
+			<arguments>
+			</arguments>
+		</buildCommand>
+	</buildSpec>
+	<natures>
+		<nature>org.eclipse.pde.PluginNature</nature>
+	</natures>
+</projectDescription>
diff --git a/security/modules/org.argeo.security.dao.admin.ldap/META-INF/MANIFEST.MF b/security/modules/org.argeo.security.dao.admin.ldap/META-INF/MANIFEST.MF
new file mode 100644
index 000000000..b6100ab26
--- /dev/null
+++ b/security/modules/org.argeo.security.dao.admin.ldap/META-INF/MANIFEST.MF
@@ -0,0 +1,20 @@
+Bundle-SymbolicName: org.argeo.security.dao.admin.ldap
+Bundle-Version: 0.2.3.SNAPSHOT
+Import-Package: com.sun.jndi.ldap;resolution:=optional,
+ org.argeo.security,
+ org.argeo.security.ldap,
+ org.argeo.security.ldap.nature,
+ org.argeo.security.nature,
+ org.argeo.server.json;resolution:=optional,
+ org.springframework.beans.factory.config,
+ org.springframework.ldap.core.support,
+ org.springframework.security,
+ org.springframework.security.ldap,
+ org.springframework.security.ldap.populator,
+ org.springframework.security.providers,
+ org.springframework.security.providers.encoding;specification-version="2.0.6.RELEASE",
+ org.springframework.security.providers.ldap,
+ org.springframework.security.providers.ldap.authenticator,
+ org.springframework.security.userdetails,
+ org.springframework.security.userdetails.ldap
+Bundle-Name: Security Manager LDAP
diff --git a/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap-osgi.xml b/security/modules/org.argeo.security.dao.admin.ldap/META-INF/spring/ldap-osgi.xml
similarity index 100%
rename from security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap-osgi.xml
rename to security/modules/org.argeo.security.dao.admin.ldap/META-INF/spring/ldap-osgi.xml
diff --git a/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml b/security/modules/org.argeo.security.dao.admin.ldap/META-INF/spring/ldap.xml
similarity index 100%
rename from security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml
rename to security/modules/org.argeo.security.dao.admin.ldap/META-INF/spring/ldap.xml
diff --git a/security/modules/org.argeo.security.manager.ldap/build.properties b/security/modules/org.argeo.security.dao.admin.ldap/build.properties
similarity index 100%
rename from security/modules/org.argeo.security.manager.ldap/build.properties
rename to security/modules/org.argeo.security.dao.admin.ldap/build.properties
diff --git a/security/modules/org.argeo.security.manager.ldap/ldap.properties b/security/modules/org.argeo.security.dao.admin.ldap/ldap.properties
similarity index 100%
rename from security/modules/org.argeo.security.manager.ldap/ldap.properties
rename to security/modules/org.argeo.security.dao.admin.ldap/ldap.properties
diff --git a/security/modules/org.argeo.security.manager.ldap/.project b/security/modules/org.argeo.security.dao.ldap/.project
similarity index 100%
rename from security/modules/org.argeo.security.manager.ldap/.project
rename to security/modules/org.argeo.security.dao.ldap/.project
diff --git a/security/modules/org.argeo.security.manager.ldap/META-INF/MANIFEST.MF b/security/modules/org.argeo.security.dao.ldap/META-INF/MANIFEST.MF
similarity index 100%
rename from security/modules/org.argeo.security.manager.ldap/META-INF/MANIFEST.MF
rename to security/modules/org.argeo.security.dao.ldap/META-INF/MANIFEST.MF
diff --git a/security/modules/org.argeo.security.dao.ldap/META-INF/spring/ldap-osgi.xml b/security/modules/org.argeo.security.dao.ldap/META-INF/spring/ldap-osgi.xml
new file mode 100644
index 000000000..7a0fa89fa
--- /dev/null
+++ b/security/modules/org.argeo.security.dao.ldap/META-INF/spring/ldap-osgi.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<beans:beans xmlns="http://www.springframework.org/schema/osgi"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:beans="http://www.springframework.org/schema/beans"
+	xsi:schemaLocation="http://www.springframework.org/schema/osgi  
+       http://www.springframework.org/schema/osgi/spring-osgi-1.1.xsd
+       http://www.springframework.org/schema/beans   
+       http://www.springframework.org/schema/beans/spring-beans-2.5.xsd">
+
+	<!-- REFERENCES -->
+	<list id="userNatureMappers" interface="org.argeo.security.ldap.UserNatureMapper"
+		cardinality="0..N" />
+
+	<!-- SERVICES -->
+	<service ref="authenticationProvider"
+		interface="org.springframework.security.providers.AuthenticationProvider"
+		context-class-loader="service-provider" />
+	<service ref="securityDao" interface="org.argeo.security.CurrentUserDao"
+		context-class-loader="service-provider" />
+	<service ref="securityDao" interface="org.argeo.security.UserAdminDao"
+		context-class-loader="service-provider" />
+	<service ref="userDetailsService"
+		interface="org.springframework.security.userdetails.UserDetailsService"
+		context-class-loader="service-provider" />
+
+	<!-- Provides deserialization -->
+	<service interface="org.argeo.server.json.JsonObjectFactory">
+		<beans:bean class="org.argeo.server.json.JsonObjectFactoryImpl" />
+	</service>
+
+</beans:beans>
\ No newline at end of file
diff --git a/security/modules/org.argeo.security.dao.ldap/META-INF/spring/ldap.xml b/security/modules/org.argeo.security.dao.ldap/META-INF/spring/ldap.xml
new file mode 100644
index 000000000..2f65ebe82
--- /dev/null
+++ b/security/modules/org.argeo.security.dao.ldap/META-INF/spring/ldap.xml
@@ -0,0 +1,61 @@
+<beans xmlns="http://www.springframework.org/schema/beans"
+	xmlns:security="http://www.springframework.org/schema/security"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
+              http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd">
+
+
+	<bean
+		class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
+		<property name="systemPropertiesModeName" value="SYSTEM_PROPERTIES_MODE_OVERRIDE" />
+		<property name="locations">
+			<value>osgibundle:ldap.properties</value>
+		</property>
+	</bean>
+
+	<bean id="passwordEncoder"
+		class="org.springframework.security.providers.ldap.authenticator.LdapShaPasswordEncoder" />
+
+	<bean id="contextSource"
+		class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
+		<constructor-arg
+			value="${argeo.ldap.protocol}://${argeo.ldap.host}:${argeo.ldap.port}/${argeo.ldap.rootdn}" />
+		<property name="userDn" value="${argeo.ldap.manager.userdn}" />
+		<property name="password" value="${argeo.ldap.manager.password}" />
+	</bean>
+
+	<bean id="authenticationProvider"
+		class="org.springframework.security.providers.ldap.LdapAuthenticationProvider">
+		<constructor-arg ref="ldapAuthenticator" />
+		<constructor-arg>
+			<bean factory-bean="securityDao" factory-method="getAuthoritiesPopulator" />
+		</constructor-arg>
+		<property name="userDetailsContextMapper">
+			<bean factory-bean="securityDao" factory-method="getUserDetailsMapper" />
+		</property>
+	</bean>
+
+	<bean id="securityDao" class="org.argeo.security.ldap.ArgeoSecurityDaoLdap">
+		<constructor-arg ref="contextSource" />
+		<property name="userNatureMappers" ref="userNatureMappers" />
+		<property name="passwordEncoder" ref="passwordEncoder" />
+	</bean>
+
+	<bean id="userDetailsService" factory-bean="securityDao"
+		factory-method="getUserDetailsService">
+	</bean>
+
+	<bean id="ldapAuthenticator"
+		class="org.springframework.security.providers.ldap.authenticator.PasswordComparisonAuthenticator">
+		<constructor-arg ref="contextSource" />
+		<property name="userDnPatterns">
+			<list>
+				<value>uid={0},ou=People</value>
+			</list>
+		</property>
+		<property name="passwordEncoder">
+			<bean
+				class="org.springframework.security.providers.ldap.authenticator.LdapShaPasswordEncoder" />
+		</property>
+	</bean>
+</beans>
diff --git a/security/modules/org.argeo.security.manager.ldap/META-INF/spring/natures-osgi.xml b/security/modules/org.argeo.security.dao.ldap/META-INF/spring/natures-osgi.xml
similarity index 100%
rename from security/modules/org.argeo.security.manager.ldap/META-INF/spring/natures-osgi.xml
rename to security/modules/org.argeo.security.dao.ldap/META-INF/spring/natures-osgi.xml
diff --git a/security/modules/org.argeo.security.dao.ldap/build.properties b/security/modules/org.argeo.security.dao.ldap/build.properties
new file mode 100644
index 000000000..5f22cdd44
--- /dev/null
+++ b/security/modules/org.argeo.security.dao.ldap/build.properties
@@ -0,0 +1 @@
+bin.includes = META-INF/
diff --git a/security/modules/org.argeo.security.dao.ldap/ldap.properties b/security/modules/org.argeo.security.dao.ldap/ldap.properties
new file mode 100644
index 000000000..1b24ee3d1
--- /dev/null
+++ b/security/modules/org.argeo.security.dao.ldap/ldap.properties
@@ -0,0 +1,6 @@
+argeo.ldap.rootdn=dc=demo,dc=argeo,dc=org
+argeo.ldap.protocol=ldap
+argeo.ldap.host=localhost
+argeo.ldap.port=10389
+argeo.ldap.manager.userdn=uid=admin,ou=system
+argeo.ldap.manager.password=secret
-- 
2.30.2