Spring Security - Third Edition

Configuring basic password comparison

Configuring password comparison authentication instead of bind authentication is as simple as adding a method to the AuthenticationManagerBuilder declaration. Update the SecurityConfig.java file, as follows:

    //src/main/java/com/packtpub/springsecurity/configuration/SecurityConfig.java    @Override    public void configure(AuthenticationManagerBuilder auth)       throws Exception {       auth         .ldapAuthentication()         .userSearchBase("")         .userSearchFilter("(uid={0})")         .groupSearchBase("ou=Groups")         .groupSearchFilter("(uniqueMember={0})")         .contextSource(contextSource())         .passwordCompare()           .passwordEncoder(new LdapShaPasswordEncoder())           .passwordAttribute("userPassword");    }

The PasswordCompareConfigurer class, that is used by ...