Questions tagged [spring-security-ldap]

285 questions
32
votes
2 answers

Spring Security LDAP and Remember Me

I'm building an app with Spring Boot that has integration with LDAP. I was able to connect successfully to LDAP server and authenticate user. Now I have a requirement to add remember-me functionality. I tried to look through different posts (this)…
Maksim
  • 16,635
  • 27
  • 94
  • 135
30
votes
4 answers

multiple authentication mechanisms in a single app using java config

Currently I have a single authentication mechanism in my application which is to use LDAP for authentication and authorization. My security configuration looks like this @Configuration @EnableWebMvcSecurity public class SecurityConfig extends…
adeelmahmood
  • 2,371
  • 8
  • 36
  • 59
14
votes
1 answer

Using spring embedded ldap to simulate active directory for integration tests

I am using the Spring Security ActiveDirectoryLdapAuthenticationProvider with Spring Boot (annotation based config) to authenticate with Active Directory and generate tokens. All works fine. I wish to add some integration tests that simulate the…
jbx
  • 21,365
  • 18
  • 90
  • 144
13
votes
2 answers

sample active directory ldif file with apacheds

Here there is a spring-security example, ldap-xml, which runs a ldap server and imports a LDIF file for…
David Portabella
  • 12,390
  • 27
  • 101
  • 182
10
votes
1 answer

Spring-boot LDAP customize UserDetails

I'm using LDAP authentication in spring-boot application (configuration based on annotations). I would like to customize UserDetails object. Default UserDetails implementation is LdapUserDetailsImpl. I would like to extend this class and add some…
jareks
  • 643
  • 1
  • 10
  • 14
9
votes
1 answer

Grails spring-security-ldap caching caching with Redis

Newbie question so bear with me... Currently I have a Grails 2.4.4 app that used spring-security-ldap 2.0.1 to authenticate + authorised users with an OpenLdap server. The LDAP people are concerned that without caching this app when move to…
alchn
  • 327
  • 1
  • 5
  • 16
9
votes
3 answers

spring-security-oauth2 2.0.7 refresh token UserDetailsService Configuration - UserDetailsService is required

I would have one question regarding the configuration of spring-security-oauth2 2.0.7 please. I am doing the Authentication using LDAP via a…
7
votes
0 answers

Connecting Spring Security OAuth2 with SAML SSO

We’re having a microservices architecture based on spring boot where we have multiple microservices talking to each other and also a Javascript UI that connects to the different microservices. Since this is an internal application and we have the…
7
votes
1 answer

What is implication of adding @Component to custom Spring Security filter

I have a custom Spring Security filter extending GenericFilterBean. To do automatic dependency and bean creation I added a @Component annotation. In my Security config I also register the filter like: @Autowired private RestAuthenticationFilter…
Marcel Overdijk
  • 11,041
  • 17
  • 71
  • 110
6
votes
2 answers

Spring Ldap Impact of Microsoft Security Advisory ADV190023 (LDAP channel binding and LDAP signing)

We are using Spring Security Ldap Library (v4.0.4) to fetch a list of users from our client's Active Directory (ldap://domain:389) and to authenticate them to sign in to our web application. Microsoft recently published an advisory to enable LDAP…
6
votes
1 answer

Multiple authentication provider for specific url - Spring Boot Security

In Spring security I want to use Basic authentication for urls starting with api/** LDAP Rest Authentication for urls starting with /ldap/. The current code i have also allows ldap/ with basic authentication. The question comes even if i use them…
6
votes
2 answers

Spring Security LDAP Authentication and gather user details from local database

In summary, user is being authenticated, but I do appear to actually have logged into the users account. I'm currently working on implementing LDAP authentication on a project. It appears that the authentication portion of things are working in the…
6
votes
0 answers

Spring + Oauth2: how to refresh access token

I am building rest web services with Spring Boot. Authentication is implemented using Spring Security and OAuth2. Users are authenticated against LDAP server. Here is my websecurityconfig @Configuration @EnableWebSecurity public class…
ddd
  • 4,665
  • 14
  • 69
  • 125
6
votes
0 answers

How to configure authentication providers per clientId in spring oauth authorization service

I am trying to determine if I could use a different authentication provider for each client ID within the same spring oauth2 authorization service. In particular, I want to allow resource owner password token grant for external users loging into our…
5
votes
1 answer

How to configure ldap in spring-security 5.7 while retaining basic form login

I'm trying to configure my webSecurity to use both ldap and basic authentication (jdbc) with the new component-based security configuration (no WebSecurityConfigurerAdapter) but I can't get it to use both. The required result is for spring to first…
Ralan
  • 651
  • 6
  • 17
1
2 3
18 19