org.ikasan.console.security.service.authentication

Class LdapAuthenticatorImpl

java.lang.Object

org.ikasan.console.security.service.authentication.LdapAuthenticatorImpl

All Implemented Interfaces:

org.springframework.security.ldap.authentication.LdapAuthenticator

public class LdapAuthenticatorImpl
extends Object
implements org.springframework.security.ldap.authentication.LdapAuthenticator

Custom Spring Security LDAP authenticator which tries to bind to an LDAP server using the passed-in credentials; does not require "master" credentials for an initial bind prior to searching for the passed-in username.

Author:

Ikasan Development Team

Constructor Summary

Constructors

Constructor and Description
LdapAuthenticatorImpl()

Method Summary

Methods

Modifier and Type	Method and Description
org.springframework.ldap.core.DirContextOperations	authenticate(org.springframework.security.core.Authentication authentication)
org.springframework.security.ldap.DefaultSpringSecurityContextSource	getContextFactory() Get the context factory
String	getPrincipalPrefix() Get the principal prefix
static InitialLdapContext	recreateLdapContext(org.springframework.security.ldap.authentication.LdapAuthenticator authenticator, LdapAuthenticationToken auth) Since the InitialLdapContext that's stored as a property of an LdapAuthenticationToken is transient (because it isn't Serializable), we need some way to recreate the InitialLdapContext if it's null (e.g., if the LdapAuthenticationToken has been serialized and deserialized).
void	setContextFactory(org.springframework.security.ldap.DefaultSpringSecurityContextSource contextFactory) Set the context factory to use for generating a new LDAP context.
void	setPrincipalPrefix(String principalPrefix) Set the string to be prepended to all principal names prior to attempting authentication against the LDAP server.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LdapAuthenticatorImpl

public LdapAuthenticatorImpl()

Method Detail

authenticate

public org.springframework.ldap.core.DirContextOperations authenticate(org.springframework.security.core.Authentication authentication)

Specified by:

authenticate in interface org.springframework.security.ldap.authentication.LdapAuthenticator

recreateLdapContext

public static InitialLdapContext recreateLdapContext(org.springframework.security.ldap.authentication.LdapAuthenticator authenticator,
                                     LdapAuthenticationToken auth)

Since the InitialLdapContext that's stored as a property of an LdapAuthenticationToken is transient (because it isn't Serializable), we need some way to recreate the InitialLdapContext if it's null (e.g., if the LdapAuthenticationToken has been serialized and deserialized). This is that mechanism.

Parameters:

authenticator - the LdapAuthenticator instance from your application's context

auth - the LdapAuthenticationToken in which to recreate the InitialLdapContext

Returns:

The reconstructed InitialLdapContext

getContextFactory

public org.springframework.security.ldap.DefaultSpringSecurityContextSource getContextFactory()

Get the context factory

Returns:

context factory

setContextFactory

public void setContextFactory(org.springframework.security.ldap.DefaultSpringSecurityContextSource contextFactory)

Set the context factory to use for generating a new LDAP context.

Parameters:

contextFactory -

getPrincipalPrefix

public String getPrincipalPrefix()

Get the principal prefix

Returns:

principal prefix

setPrincipalPrefix

public void setPrincipalPrefix(String principalPrefix)

Set the string to be prepended to all principal names prior to attempting authentication against the LDAP server. (For example, if the Active Directory wants the domain-name-plus backslash prepended, use this.)

Parameters:

principalPrefix -