]>
git.argeo.org Git - lgpl/argeo-commons.git/blob - ldap.xml
7e2cac430a994f28b5ffc885d013f8b976a8f949
1 <beans xmlns=
"http://www.springframework.org/schema/beans"
2 xmlns:
security=
"http://www.springframework.org/schema/security"
3 xmlns:
xsi=
"http://www.w3.org/2001/XMLSchema-instance"
4 xsi:
schemaLocation=
"http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
5 http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd">
7 <security:ldap-server url=
"ldap://localhost:10389/dc=demo,dc=argeo,dc=org"
8 manager-dn=
"uid=admin,ou=system" manager-password=
"secret" />
10 <security:ldap-authentication-provider
11 user-details-class=
"inetOrgPerson" user-dn-pattern=
"uid={0},ou=users"
12 group-search-base=
"ou=groups">
13 <security:password-compare hash=
"{sha}" />
14 </security:ldap-authentication-provider>
17 <bean id="contextSource"
18 class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
19 <constructor-arg value="ldap://localhost:389/dc=argeo,dc=org" />
20 <property name="userDn" value="cn=Manager,dc=argeo,dc=org" />
21 <property name="password" value="secret" /> </bean> <bean
23 class="org.springframework.security.providers.ldap.LdapAuthenticationProvider">
24 <constructor-arg> <bean
25 class="org.springframework.security.providers.ldap.authenticator.PasswordComparisonAuthenticator">
26 <constructor-arg ref="contextSource" /> <property
27 name="userDnPatterns"> <list> <value>uid={0},ou=users</value> </list>
28 </property> <property name="passwordEncoder"> <bean
29 class="org.springframework.security.providers.ldap.authenticator.LdapShaPasswordEncoder"></bean>
30 </property> </bean> </constructor-arg> <constructor-arg> <bean
31 class="org.springframework.security.ldap.populator.DefaultLdapAuthoritiesPopulator">
32 <constructor-arg ref="contextSource" /> <constructor-arg
33 value="ou=groups" /> <property name="groupRoleAttribute" value="ou" />
34 </bean> </constructor-arg> </bean>