mirror of
https://github.com/paradizelost/docker.git
synced 2024-11-25 02:44:45 -06:00
62 lines
3.0 KiB
XML
62 lines
3.0 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<beans:beans xmlns:beans="http://www.springframework.org/schema/beans"
|
|
xmlns:security="http://www.springframework.org/schema/security"
|
|
xmlns:task="http://www.springframework.org/schema/task"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://www.springframework.org/schema/beans
|
|
http://www.springframework.org/schema/beans/spring-beans.xsd
|
|
http://www.springframework.org/schema/security
|
|
http://www.springframework.org/schema/security/spring-security.xsd
|
|
http://www.springframework.org/schema/task
|
|
http://www.springframework.org/schema/task/spring-task.xsd">
|
|
|
|
<security:authentication-manager alias="authenticationManager">
|
|
<security:authentication-provider ref="ldapAuthProvider" />
|
|
</security:authentication-manager>
|
|
|
|
<beans:bean id="contextSource" class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
|
|
<beans:constructor-arg value="ldap://10.0.0.15:389"/>
|
|
<beans:property name="userDn" value="AUTHUSERDN"/>
|
|
<beans:property name="password" value="PASSWORD"/>
|
|
<beans:property name="baseEnvironmentProperties">
|
|
<beans:map>
|
|
<beans:entry>
|
|
<beans:key>
|
|
<beans:value>java.naming.referral</beans:value>
|
|
</beans:key>
|
|
<beans:value>follow</beans:value>
|
|
</beans:entry>
|
|
</beans:map>
|
|
</beans:property>
|
|
</beans:bean>
|
|
|
|
<beans:bean id="ldapAuthProvider" class="org.springframework.security.ldap.authentication.LdapAuthenticationProvider">
|
|
<beans:constructor-arg>
|
|
<beans:bean class="org.springframework.security.ldap.authentication.BindAuthenticator">
|
|
<beans:constructor-arg ref="contextSource"/>
|
|
<beans:property name="userSearch" ref="userSearch"/>
|
|
</beans:bean>
|
|
</beans:constructor-arg>
|
|
<beans:constructor-arg>
|
|
<beans:bean class="org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator">
|
|
<beans:constructor-arg ref="contextSource"/>
|
|
<beans:constructor-arg value="DC=DOMAIN,DC=net"/>
|
|
<beans:property name="groupSearchFilter" value="member={0}"/>
|
|
<beans:property name="groupRoleAttribute" value="cn"/>
|
|
<beans:property name="searchSubtree" value="true" />
|
|
<beans:property name="convertToUpperCase" value="false" />
|
|
<beans:property name="rolePrefix" value="" />
|
|
</beans:bean>
|
|
</beans:constructor-arg>
|
|
</beans:bean>
|
|
|
|
<beans:bean id="userSearch" class="org.springframework.security.ldap.search.FilterBasedLdapUserSearch">
|
|
<beans:constructor-arg index="0" value="DC=lan,DC=hamik,DC=net" />
|
|
<beans:constructor-arg index="1" value="(&(sAMAccountName={0})(|(memberOf=CN=ROLE_ADMIN,CN=Users,DC=DOMAIN,DC=net)(memberOf=CN=ROLE_USERS,CN=Users,DC=DOMAIN,DC=net)))" />
|
|
<beans:constructor-arg index="2" ref="contextSource" />
|
|
<beans:property name="searchSubtree" value="true" />
|
|
</beans:bean>
|
|
|
|
</beans:beans>
|
|
|