pepa
6737d44d62
lze omezit přihlašování do aplikace pouze na uživatele (z AD nebo LDAP), ktří jsou členy nastavené skupiny.
25 lines
1.2 KiB
XML
25 lines
1.2 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<beans xmlns="http://www.springframework.org/schema/beans"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xmlns:security="http://www.springframework.org/schema/security"
|
|
xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
|
|
http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd">
|
|
|
|
<security:authentication-manager>
|
|
<security:authentication-provider ref="adAuthProvider"/>
|
|
</security:authentication-manager>
|
|
|
|
<bean id="adAuthProvider" class="org.springframework.security.ldap.authentication.ad.ActiveDirectoryLdapAuthenticationProvider">
|
|
<constructor-arg name="domain" value="${ad.domain}"/>
|
|
<constructor-arg name="url" value="${ad.ldapUrl}"/>
|
|
<property name="userDetailsContextMapper" ref="adUserMapper"/>
|
|
</bean>
|
|
|
|
<bean id="adUserMapper" class="info.bukova.isspst.services.users.AdUserCtxMapper">
|
|
<constructor-arg name="userService" ref="userService"/>
|
|
<constructor-arg name="roleService" ref="roleService"/>
|
|
<property name="allowedGroup" value="${ad.allowedGroup}"/>
|
|
</bean>
|
|
|
|
</beans>
|