</property>
</bean>
- <!--
- <security:ldap-server
- url="ldap://localhost:10389/dc=demo,dc=argeo,dc=org"
- manager-dn="uid=admin,ou=system" manager-password="secret" />
-
- <security:ldap-authentication-provider
- user-details-class="inetOrgPerson" user-dn-pattern="uid={0},ou=users"
- group-search-base="ou=groups"> <security:password-compare hash="{sha}"
- /> </security:ldap-authentication-provider>
- -->
-
<bean id="contextSource"
class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
<constructor-arg value="ldap://localhost:10389/dc=demo,dc=argeo,dc=org" />
</property>
</bean>
</constructor-arg>
- <constructor-arg>
+ <constructor-arg ref="authoritiesPopulator" />
+ <property name="userDetailsContextMapper" ref="userDetailsMapper" />
+ </bean>
+
+ <bean id="authoritiesPopulator" class="org.argeo.security.ldap.ArgeoLdapAuthoritiesPopulator">
+ <constructor-arg ref="contextSource" />
+ <constructor-arg value="ou=groups" />
+ <property name="defaultRole" value="ROLE_USER" />
+ <property name="groupSearchFilter" value="uniqueMember={0}" />
+ </bean>
+
+ <bean id="userDetailsManager"
+ class="org.springframework.security.userdetails.ldap.LdapUserDetailsManager">
+ <constructor-arg ref="contextSource" />
+ <property name="userDetailsMapper" ref="userDetailsMapper" />
+ <property name="groupSearchBase" value="ou=groups" />
+ <property name="usernameMapper">
<bean
- class="org.springframework.security.ldap.populator.DefaultLdapAuthoritiesPopulator">
- <constructor-arg ref="contextSource" />
- <constructor-arg value="ou=groups" />
- <!-- <property name="defaultRole" value="ROLE_USER" /> -->
- <property name="groupSearchFilter" value="uniqueMember={0}" />
+ class="org.springframework.security.ldap.DefaultLdapUsernameToDnMapper">
+ <constructor-arg value="ou=users" />
+ <constructor-arg value="uid" />
</bean>
- </constructor-arg>
+ </property>
</bean>
+ <bean id="userDetailsMapper" class="org.argeo.security.ldap.ArgeoUserDetailsContextMapper">
+ <property name="userNatureMappers" ref="userNatureMappers" />
+ </bean>
</beans>