November 2017
Intermediate to advanced
542 pages
14h 24m
English
Some LDAP servers will be configured so that certain individual users are not allowed to bind directly to the server, or so that anonymous binding (what we have been using for user search up until this point) is disabled. This tends to occur in very large organizations which want a restricted set of users to be able to read information from the directory.
In these cases, the standard Spring Security LDAP authentication strategy will not work, and an alternative strategy must be used, implemented by o.s.s.ldap.authentication.PasswordComparisonAuthenticator (a sibling class of BindAuthenticator):
The PasswordComparisonAuthenticator interface binds to LDAP and searches for the DN matching the username ...
Read now
Unlock full access