Java DefaultLdapAuthoritiesPopulator类代码示例

import org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator; //导入依赖的package包/类
@Bean
public LdapAuthoritiesPopulator authoritiesPopulator() {
    DefaultLdapAuthoritiesPopulator populator = new DefaultLdapAuthoritiesPopulator(
            contextSource(),
            configuration.getGroupSearchBase());
    populator.setGroupSearchFilter(configuration.getGroupSearchFilter());
    populator.setGroupRoleAttribute(configuration.getGroupRoleAttribute());
    populator.setSearchSubtree(true);
    populator.setRolePrefix("");
    return populator;
}
 

import org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator; //导入依赖的package包/类
public void init() throws Exception {
    if (!useLdapAuth()) {
        return;
    }
    LdapContextSource contextSource = new DefaultSpringSecurityContextSource(ldapHost);
    contextSource.setUserDn(ldapUsername);
    contextSource.setPassword(ldapPassword);
    contextSource.afterPropertiesSet();

    DefaultLdapAuthoritiesPopulator ldapAuthoritiesPopulator =
            new DefaultLdapAuthoritiesPopulator(contextSource, ldapGroupSearchBase);
    ldapAuthoritiesPopulator.setGroupRoleAttribute(ldapGroupRoleAttribute);
    ldapAuthoritiesPopulator.setGroupSearchFilter(ldapGroupSearchFilter);

    ldapBindAuthenticator = new SimpleBindAunthenticator(contextSource, gizmoGroup);
    ldapBindAuthenticator.setUserDnPatterns(new String[]{userDnPattern});
}
 

import org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator; //导入依赖的package包/类
@Bean
public LdapAuthoritiesPopulator ldapAuthoritiesPopulator() {
	DefaultLdapAuthoritiesPopulator populator = new DefaultLdapAuthoritiesPopulator(contextSource(), ldapValue.getGroupSearchBase());
	populator.setSearchSubtree(true);
	populator.setIgnorePartialResultException(true);
	return populator;
}
 

import org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator; //导入依赖的package包/类
@Bean
public LdapAuthoritiesPopulator authoritiesPopulator(){
    return new DefaultLdapAuthoritiesPopulator(contextSource(),
            "ou=Groups"){{
                setGroupSearchFilter("(uniqueMember={0})");
    }};
}
 

import org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator; //导入依赖的package包/类
@Bean
public OsiamLdapAuthenticationProvider osiamLdapAuthenticationProvider() {
    return new OsiamLdapAuthenticationProvider(
            bindAuthenticator(),
            new DefaultLdapAuthoritiesPopulator(contextSource(), groupSearchBase),
            new OsiamLdapUserContextMapper(ldapToScimAttributeMapping()));
}
 

import org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator; //导入依赖的package包/类
private DefaultLdapAuthoritiesPopulator getDefaultLdapAuthoritiesPopulator(
        LdapContextSource ldapContextSource) {
    DefaultLdapAuthoritiesPopulator defaultLdapAuthoritiesPopulator = new DefaultLdapAuthoritiesPopulator(
            ldapContextSource, ldapGroupSearchBase);
    defaultLdapAuthoritiesPopulator
            .setGroupRoleAttribute(ldapGroupRoleAttribute);
    defaultLdapAuthoritiesPopulator
            .setGroupSearchFilter(ldapGroupSearchFilter);
    defaultLdapAuthoritiesPopulator.setIgnorePartialResultException(true);
    return defaultLdapAuthoritiesPopulator;
}
 

import org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator; //导入依赖的package包/类
@Bean
@Autowired
public OsiamLdapAuthenticationProvider osiamLdapAuthenticationProvider(SCIMUserProvisioning userProvisioning,
                                                                       @Value("${osiam.ldap.sync-user-data:true}") boolean syncUserData) {
    return new OsiamLdapAuthenticationProvider(
            bindAuthenticator(),
            new DefaultLdapAuthoritiesPopulator(contextSource(), ""),
            new OsiamLdapUserContextMapper(ldapToScimAttributeMapping()),
            userProvisioning,
            syncUserData);
}
 

import org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator; //导入依赖的package包/类
@Override
public SecurityConfigurer configure() throws Exception {
    LOGGER.info("Configuring an LDAP Identity Provider");

    LdapAuthenticationProviderConfigurer<AuthenticationManagerBuilder> ldapAuthenticationProviderConfigurer =
            new LdapAuthenticationProviderConfigurer<>();

    // Create LDAP context
    DefaultSpringSecurityContextSource contextSource = new DefaultSpringSecurityContextSource(
            environment.getProperty("context-source-url"));
    contextSource.setBase(environment.getProperty("context-source-base"));
    contextSource.setUserDn(environment.getProperty("context-source-username"));
    contextSource.setPassword(environment.getProperty("context-source-password"));
    contextSource.afterPropertiesSet();

    String userDNPattern = environment.getProperty("user-dn-pattern");
    if (userDNPattern == null || userDNPattern.isEmpty()) {
        ldapAuthenticationProviderConfigurer
                .userSearchBase(environment.getProperty("user-search-base"))
                .userSearchFilter(environment.getProperty("user-search-filter"));
    } else {
        ldapAuthenticationProviderConfigurer.userDnPatterns(userDNPattern);
    }

    ldapAuthenticationProviderConfigurer
            .groupSearchBase(environment.getProperty("group-search-base", ""))
            .groupSearchFilter(environment.getProperty("group-search-filter", "(uniqueMember={0})"))
            .groupRoleAttribute(environment.getProperty("group-role-attribute", "cn"))
            .rolePrefix("");

    DefaultLdapAuthoritiesPopulator populator = new DefaultLdapAuthoritiesPopulator(contextSource,
            environment.getProperty("group-search-base", ""));
    populator.setRolePrefix("");

    ldapAuthenticationProviderConfigurer.ldapAuthoritiesPopulator(populator).contextSource(contextSource);

    // set up LDAP mapper
    UserDetailsContextPropertiesMapper userDetailsContextPropertiesMapper = new UserDetailsContextPropertiesMapper();
    userDetailsContextPropertiesMapper.setEnvironment(environment);
    userDetailsContextPropertiesMapper.afterPropertiesSet();
    ldapAuthenticationProviderConfigurer.userDetailsContextMapper(userDetailsContextPropertiesMapper);

    return ldapAuthenticationProviderConfigurer;
}
 

import org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator; //导入依赖的package包/类
private Authentication getLdapBindAuthentication(
        Authentication authentication) {
    try {
        if (isDebugEnabled) {
            LOG.debug("==> AtlasLdapAuthenticationProvider getLdapBindAuthentication");
        }
        String userName = authentication.getName();
        String userPassword = "";
        if (authentication.getCredentials() != null) {
            userPassword = authentication.getCredentials().toString();
        }

        LdapContextSource ldapContextSource = getLdapContextSource();

        DefaultLdapAuthoritiesPopulator defaultLdapAuthoritiesPopulator = getDefaultLdapAuthoritiesPopulator(ldapContextSource);

        if (ldapUserSearchFilter == null
                || ldapUserSearchFilter.trim().isEmpty()) {
            ldapUserSearchFilter = "(uid={0})";
        }

        FilterBasedLdapUserSearch userSearch = new FilterBasedLdapUserSearch(
                ldapBase, ldapUserSearchFilter, ldapContextSource);
        userSearch.setSearchSubtree(true);

        BindAuthenticator bindAuthenticator = getBindAuthenticator(
                userSearch, ldapContextSource);

        LdapAuthenticationProvider ldapAuthenticationProvider = new LdapAuthenticationProvider(
                bindAuthenticator, defaultLdapAuthoritiesPopulator);

        if (userName != null && userPassword != null
                && !userName.trim().isEmpty()
                && !userPassword.trim().isEmpty()) {
            final List<GrantedAuthority> grantedAuths = getAuthorities(userName);
            final UserDetails principal = new User(userName, userPassword,
                    grantedAuths);
            final Authentication finalAuthentication = new UsernamePasswordAuthenticationToken(
                    principal, userPassword, grantedAuths);
            authentication = ldapAuthenticationProvider.authenticate(finalAuthentication);
            if(groupsFromUGI) {
                authentication = getAuthenticationWithGrantedAuthorityFromUGI(authentication);
            }
            return authentication;
        } else {
            LOG.error("LDAP Authentication::userName or userPassword is null or empty for userName "
                    + userName);
        }
    } catch (Exception e) {
        LOG.error(" getLdapBindAuthentication LDAP Authentication Failed:", e);
    }
    if (isDebugEnabled) {
        LOG.debug("<== AtlasLdapAuthenticationProvider getLdapBindAuthentication");
    }
    return authentication;
}