1 <beans xmlns=
"http://www.springframework.org/schema/beans"
2 xmlns:
security=
"http://www.springframework.org/schema/security"
3 xmlns:
xsi=
"http://www.w3.org/2001/XMLSchema-instance"
4 xsi:
schemaLocation=
"http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd
5 http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.4.xsd">
9 class=
"org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
10 <property name=
"systemPropertiesModeName" value=
"SYSTEM_PROPERTIES_MODE_OVERRIDE" />
11 <property name=
"locations">
12 <value>osgibundle:ldap.properties
</value>
16 <bean id=
"passwordEncoder" class=
"org.argeo.security.ldap.ArgeoLdapShaPasswordEncoder">
17 <property name=
"useSalt" value=
"${argeo.ldap.password.useSalt}" />
20 <bean id=
"contextSource"
21 class=
"org.springframework.security.ldap.DefaultSpringSecurityContextSource">
23 value=
"${argeo.ldap.protocol}://${argeo.ldap.host}:${argeo.ldap.port}/${argeo.ldap.rootdn}" />
24 <property name=
"userDn" value=
"${argeo.ldap.manager.userdn}" />
25 <property name=
"password" value=
"${argeo.ldap.manager.password}" />
28 <!-- AUTHENTICATION -->
29 <bean id=
"ldapAuthenticationProvider"
30 class=
"org.springframework.security.providers.ldap.LdapAuthenticationProvider">
31 <constructor-arg ref=
"ldapAuthenticator" />
32 <constructor-arg ref=
"authoritiesPopulator" />
33 <property name=
"userDetailsContextMapper" ref=
"jcrUserDetailsContextMapper" />
36 <!-- <bean id="ldapAuthenticator" -->
37 <!-- class="org.springframework.security.providers.ldap.authenticator.BindAuthenticator"> -->
38 <!-- <constructor-arg ref="contextSource" /> -->
39 <!-- <property name="userDnPatterns"> -->
41 <!-- <value><![CDATA[${argeo.ldap.usernameAttribute}={0},${argeo.ldap.userBase}]]></value> -->
46 <!-- PasswordComparisonAuthenticator doesn't work with SSHA -->
47 <bean id=
"ldapAuthenticator"
48 class=
"org.springframework.security.providers.ldap.authenticator.PasswordComparisonAuthenticator">
49 <constructor-arg ref=
"contextSource" />
50 <property name=
"userDnPatterns">
52 <value><![CDATA[${argeo.ldap.usernameAttribute}={
0},${argeo.ldap.userBase}]]
></value>
55 <property name=
"passwordAttributeName" value=
"${argeo.ldap.passwordAttribute}" />
56 <property name=
"passwordEncoder" ref=
"passwordEncoder" />
60 <bean id=
"userAdminDao" class=
"org.argeo.security.ldap.ArgeoSecurityDaoLdap">
61 <constructor-arg ref=
"contextSource" />
62 <property name=
"userBase" value=
"${argeo.ldap.userBase}" />
63 <property name=
"usernameAttribute" value=
"${argeo.ldap.usernameAttribute}" />
64 <property name=
"groupClasses">
67 <value>${argeo.ldap.groupClass}
</value>
70 <property name=
"groupBase" value=
"${argeo.ldap.groupBase}" />
71 <property name=
"groupRoleAttribute" value=
"${argeo.ldap.groupRoleAttribute}" />
72 <property name=
"groupMemberAttribute" value=
"${argeo.ldap.groupMemberAttribute}" />
73 <property name=
"defaultRole" value=
"${argeo.security.defaultRole}" />
74 <property name=
"rolePrefix" value=
"${argeo.security.rolePrefix}" />
75 <property name=
"usernameMapper" ref=
"usernameMapper" />
78 <bean id=
"usernameMapper"
79 class=
"org.springframework.security.ldap.DefaultLdapUsernameToDnMapper">
80 <constructor-arg value=
"${argeo.ldap.userBase}" />
81 <constructor-arg value=
"${argeo.ldap.usernameAttribute}" />
84 <bean id=
"authoritiesPopulator"
85 class=
"org.springframework.security.ldap.populator.DefaultLdapAuthoritiesPopulator">
86 <constructor-arg ref=
"contextSource" />
87 <constructor-arg value=
"${argeo.ldap.groupBase}" />
88 <property name=
"groupSearchFilter" value=
"${argeo.ldap.groupMemberAttribute}={0}" />
89 <property name=
"defaultRole" value=
"${argeo.security.defaultRole}" />
90 <property name=
"rolePrefix" value=
"${argeo.security.rolePrefix}" />
93 <bean id=
"userDetailsManager" class=
"org.argeo.security.ldap.ArgeoLdapUserDetailsManager">
94 <constructor-arg ref=
"contextSource" />
95 <property name=
"groupSearchBase" value=
"${argeo.ldap.groupBase}" />
96 <property name=
"groupMemberAttributeName" value=
"${argeo.ldap.groupMemberAttribute}" />
97 <property name=
"usernameMapper" ref=
"usernameMapper" />
98 <property name=
"userDetailsMapper" ref=
"jcrUserDetailsContextMapper" />
99 <property name=
"userAdminDao" ref=
"userAdminDao" />
100 <property name=
"passwordEncoder" ref=
"passwordEncoder" />
101 <property name=
"passwordAttributeName" value=
"${argeo.ldap.passwordAttribute}" />