X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=security%2Fmodules%2Forg.argeo.security.manager.ldap%2FMETA-INF%2Fspring%2Fldap.xml;h=2867ad2c23ea08a1f240d3886b0e92d7f98e1be8;hb=727a852dcd2a6e80b11ae71ca37f50d202baae5c;hp=49a2c93d1b5d2527a81d131f613ba2496193a88b;hpb=23daa3a3818f0a18703a3b0ca95c7908326f95cb;p=lgpl%2Fargeo-commons.git

diff --git a/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml b/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml
index 49a2c93d1..2867ad2c2 100644
--- a/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml
+++ b/security/modules/org.argeo.security.manager.ldap/META-INF/spring/ldap.xml
@@ -48,15 +48,37 @@
 				</property>
 			</bean>
 		</constructor-arg>
-		<constructor-arg>
+		<constructor-arg ref="authoritiesPopulator" />
+		<property name="userDetailsContextMapper" ref="userDetailsMapper" />
+	</bean>
+
+	<bean id="authoritiesPopulator" class="org.argeo.security.ldap.ArgeoLdapAuthoritiesPopulator">
+		<constructor-arg ref="contextSource" />
+		<constructor-arg value="ou=groups" />
+		<!-- <property name="defaultRole" value="ROLE_USER" /> -->
+		<property name="groupSearchFilter" value="uniqueMember={0}" />
+	</bean>
+
+	<bean id="userDetailsManager"
+		class="org.springframework.security.userdetails.ldap.LdapUserDetailsManager">
+		<constructor-arg ref="contextSource" />
+		<property name="userDetailsMapper" ref="userDetailsMapper" />
+		<property name="groupSearchBase" value="ou=groups" />
+		<property name="usernameMapper">
 			<bean
-				class="org.springframework.security.ldap.populator.DefaultLdapAuthoritiesPopulator">
-				<constructor-arg ref="contextSource" />
-				<constructor-arg value="ou=groups" />
-				<!-- <property name="defaultRole" value="ROLE_USER" /> -->
-				<property name="groupSearchFilter" value="uniqueMember={0}" />
+				class="org.springframework.security.ldap.DefaultLdapUsernameToDnMapper">
+				<constructor-arg value="ou=users" />
+				<constructor-arg value="uid" />
 			</bean>
-		</constructor-arg>
+		</property>
 	</bean>
 
+	<bean id="userDetailsMapper" class="org.argeo.security.ldap.ArgeoUserDetailsContextMapper">
+		<property name="userNatureMappers">
+			<list>
+				<bean class="org.argeo.security.ldap.SimpleUserNatureMapper" />
+				<bean class="org.argeo.security.ldap.CoworkerUserNatureMapper" />
+			</list>
+		</property>
+	</bean>
 </beans>