November 2017
Intermediate to advanced
542 pages
14h 24m
English
In some cases, it may be necessary to use an alternate LDAP attribute instead of userPassword, for authentication purposes. This can happen during occasions when companies have deployed custom LDAP schemas or don't have the requirement for strong password management (arguably, this is never a good idea, but it definitely does occur in the real world).
The PasswordComparisonAuthenticator interface also supports the ability to verify the user's password against an alternate LDAP entry attribute instead of the standard userPassword attribute. This is very easy to configure, and we can demonstrate a simple example using the plaintext telephoneNumber attribute. Update the SecurityConfig.java, as follows:
Read now
Unlock full access